Dell PowerProtect suma cuatro fallas 9.8 sin autenticación: un atacante puede crear cuentas privilegiadas y ejecutar comandos como root.

eBay — 1009.95 €

eBay — 1009.95 €

NCSC-NL meldet mehrere Schwachstellen in Dell PowerProtect Data Domain mit dem Schweregrad hoch. Betroffen: CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-103799, CVE-2026-…

CERT-Bund (BSI) meldet mehrere Schwachstellen in Dell PowerProtect Data Domain OS mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht bei…

Versions of Dell PowerProtect Data Domain Management Center from 7.7.1.0 up to 8.8 and several long‑term support releases can be tricked into accepting a.

Versions of Dell PowerProtect Data Domain Management Center from 7.7.1.0 up to 8.6.1.20 do not properly check a user's rights.

Certain versions of Dell PowerProtect Data Domain have a flaw that lets an unauthenticated attacker running on the network overflow a memory buffer and.

Certain versions of Dell PowerProtect Data Domain use a hard-coded encryption key, which can be discovered by an attacker who does not need to log in.

Versions of Dell PowerProtect Data Domain from 7.7.1.0 up to the latest LTS releases can be accessed without proper login checks.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Versions of Dell PowerProtect Data Domain Management Center up to 8.8 contain a flaw that can let an attacker with low privileges connect over the network.

TL;DR Dell's security advisory DSA-2026-416 lists more than 180 CVEs affecting its backup appliances. Among them are 48 Dell-specific PowerProtect Data Domain vulnerabilities. Four of these score 9.8 on CVSS v3.1 and need no login to exploit. Unauthenticated attackers could gain root command execution or create privileged accounts on Data Domain systems. The advisory also patches dozens of third-party components inside DD OS.

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading …

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with …

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could …

Versions of Dell PowerProtect Data Domain from 7.7.1.0 up to 8.6.1.20 can be accessed over the network without proper verification, allowing anyone on the.