{"id":"CVE-2026-103779","kind":"vulnerability","aliases":["CVE-2026-103779"],"related":[],"title":"Dell PowerProtect Data Domain: improper authentication lets a low-privileged user bypass protection","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.","summary":"Several Dell PowerProtect Data Domain release lines contain an improper authentication flaw. A low-privileged attacker with remote access could bypass protection mechanisms on the appliance.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed DD OS version on the appliance (for example with the `system show version` command) and compare it to the affected ranges in the description\n- unknown","fix":"- Move to a DD OS release outside the affected ranges (the sources list the affected ranges; the fixed versions are unknown)\n- unknown","status":"open","published_at":"2026-10-28T11:17:13+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","triaged_at":"2026-10-28T11:33:19+00:00","updated_at":"2026-10-28T11:33:19+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T11:33:19Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a DD OS release outside the affected ranges (the sources list the affected ranges; the fixed versions are unknown)\n- unknown","reach":"network","title":"Dell PowerProtect Data Domain: improper authentication lets a low-privileged user bypass protection","impact":"medium","summary":"Several Dell PowerProtect Data Domain release lines contain an improper authentication flaw. A low-privileged attacker with remote access could bypass protection mechanisms on the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"low-privileged remote attacker bypasses protection mechanisms on the appliance","analyst_note":"Find Dell's advisory for CVE-2026-103779 to get fixed versions and exact impact; the NVD text gives only the affected ranges.","how_to_check":"- Check the installed DD OS version on the appliance (for example with the `system show version` command) and compare it to the affected ranges in the description\n- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected Feature Release, LTS2024, LTS2025 or LTS2026 builds. The sources do not say which configurations are exposed beyond the low-privileged remote access condition.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000607,"input_tokens":3411,"output_tokens":532,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-103779':17A,20A '-2026':16A,19A '7.13.1.0':70C '7.13.1.80':72C '7.7.1.0':64C '8.3.1.0':76C '8.3.1.40':78C '8.6.1.0':82C '8.6.1.20':84C '8.8':66C 'access':49B,96C 'applianc':23B,56B 'attack':46B,93C 'authent':6A,40B,88C 'backup':22B 'backup-appli':21B 'bypass':13A,51B,106C 'contain':37B,85C 'could':50B,97C 'cve':15A,18A 'data':3A,25B,33B,59C 'data-domain':24B 'dell':1A,27B,31B,57C 'domain':4A,26B,34B,60C 'exploit':99C 'featur':61C 'flaw':41B 'improp':5A,39B,87C 'infrastructur':28B 'lead':102C 'let':7A 'line':36B 'low':10A,44B,91C 'low-privileg':9A,43B 'lts2024':67C 'lts2025':73C 'lts2026':79C 'mechan':53B,105C 'potenti':98C 'powerprotect':2A,29B,32B,58C 'privileg':11A,45B,92C 'protect':14A,52B,104C 'releas':35B,62C,68C,74C,80C 'remot':48B,95C 'sever':30B 'user':12A 'version':63C,69C,75C,81C 'vulner':89C,101C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected Feature Release, LTS2024, LTS2025 or LTS2026 builds. The sources do not say which configurations are exposed beyond the low-privileged remote access condition.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-103779","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103779","severity":null,"published_at":"2026-10-28T11:17:13+00:00","modified_at":"2026-10-28T11:17:13+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","fetched_at":"2026-10-28T11:32:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}