CVE-2026-23777
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
63/100
Published: 2026-04-17
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| dell | data_domain_operating_system | 7.7.1.0 – 8.5.0.0 |
| dell | powerprotect_data_domain | 7.13.1.0 – 7.13.1.50 |
References & Advisories (1)
Vendor Advisory