Live › vulnerability › CVE-2026-103792
Go to dashboardDell PowerProtect Data Domain Management Center has an SQL injection flaw in several release lines. A low-privileged remote attacker can exploit it to gain unauthorized access to systems the center manages.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
Teams running Dell PowerProtect Data Domain Management Center in the listed Feature Release, LTS2024, LTS2025 or LTS2026 version ranges are affected. The sources say a low-privileged attacker with remote access can exploit it, so any reachable deployment is exposed. Systems on versions outside the listed ranges are not affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems.
This page as .md · .json · in your agent: get_signal("CVE-2026-103792")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.