Authentication Bypass Vulnerability in Dell PowerProtect Data Domain Management Center
CVE-2026-90717

9.1CRITICAL

Key Information:

Vendor

Dell
Status
Powerprotect Data Domain Management Center
Vendor
CVE Published:
28 October 2026

What is CVE-2026-90717?

The Dell PowerProtect Data Domain Management Center is affected by an authentication bypass vulnerability that allows low-privileged attackers with remote access to exploit the system. This could lead to an elevation of privileges, possibly impacting other managed Data Domain systems. It is essential for users to apply necessary updates and monitor for unusual access patterns to safeguard their data environments.

Affected Version(s)

PowerProtect Data Domain Management Center 0 < 8.9.0.0 or later

PowerProtect Data Domain Management Center 0 < 7.13.1.90 or later

PowerProtect Data Domain Management Center 0 < 8.3.1.50 or later

References

https://www.dell.com/support/kbdoc/en-us/000515178/dsa-20...
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.