Authentication Bypass Vulnerability in Dell PowerProtect Data Domain

CVE-2025-36594

What is CVE-2025-36594?

The Dell PowerProtect Data Domain systems are vulnerable to an authentication bypass by spoofing. This vulnerability allows an unauthenticated attacker with remote access to exploit the system, potentially bypassing protection mechanisms. The attacker can create unauthorized accounts that may expose sensitive customer information and compromise the integrity and availability of the system. This critical security risk highlights the importance of regular updates and robust security measures in safeguarding data.

References