---
id: "CVE-2026-103779"
kind: "vulnerability"
aliases: ["CVE-2026-103779"]
title: "Dell PowerProtect Data Domain: improper authentication lets a low-privileged user bypass protection"
severity: "high"
cvss: 8.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["backup-appliance", "data-domain", "dell", "infrastructure", "powerprotect"]
not_affected_if: ["unknown"]
published_at: "2026-10-28T11:17:13+00:00"
first_seen_at: "2026-10-28T11:32:27+00:00"
updated_at: "2026-10-28T11:33:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103779", "first_seen_at": "2026-10-28T11:32:27+00:00"}]
---

# Dell PowerProtect Data Domain: improper authentication lets a low-privileged user bypass protection

Several Dell PowerProtect Data Domain release lines contain an improper authentication flaw. A low-privileged attacker with remote access could bypass protection mechanisms on the appliance.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed DD OS version on the appliance (for example with the `system show version` command) and compare it to the affected ranges in the description
- unknown

## Fix

- Move to a DD OS release outside the affected ranges (the sources list the affected ranges; the fixed versions are unknown)
- unknown

## Timeline

- 2026-10-28T11:32:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103779

## From the sources

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_