{"id":"CVE-2026-103799","published":"2026-10-28T11:17:14.390","lastModified":"2026-10-28T14:13:52.740","description":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing authorization check in Dell PowerProtect Data Domain Management Center allows a low-privileged remote attacker to perform unauthorized operations on managed systems across multiple feature and LTS releases.","exploitability":"Exploitation requires only low-privilege network access; no special conditions or user interaction are needed, but the attacker must already hold a valid authenticated session with minimal permissions.","blast_radius":"Successful exploitation could enable an attacker to execute unauthorized administrative actions on managed storage systems, compromising data integrity and system availability without affecting confidentiality directly.","remediation":"Upgrade to Dell PowerProtect Data Domain Management Center version 7.13.1.81 or later for LTS2024, 8.3.1.41 or later for LTS2025, 8.6.1.21 or later for LTS2026, or 8.8.0.1 or later for Feature Release 8.x.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["missing-authorization","privilege-escalation","ddm","storage-systems"],"model":"garnet-coder","analyzedAt":"2026-10-29T08:44:26.947Z"}}