PT-2026-33428 · Dell · Dell Powerprotect Data Domain

Published 2026-04-17 · Updated 2026-04-17 · CVE-2026-23775

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain appliances versions 8.0 through 8.5 Dell PowerProtect Data Domain appliances versions 8.3.1.0 through 8.3.1.10

Description An issue exists where sensitive information is inserted into log files. A low privileged attacker with remote access could exploit this to cause credential exposures. This occurs only on systems with retention lock enabled. Authentication attempts using the compromised credentials would require authorization by a high privileged user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-23775

Affected Products

Dell Powerprotect Data Domain

References · 4

• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23775 · Security Note
• https://twitter.com/VulmonFeeds/status/2045101873351254356 · Twitter Post
• https://twitter.com/CVEnew/status/2045102592636633215 · Twitter Post