{"id":"CVE-2026-103792","kind":"vulnerability","aliases":["CVE-2026-103792"],"related":[],"title":"Dell PowerProtect Data Domain Management Center: SQL injection grants unauthorized access to managed systems","description":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems.","summary":"Dell PowerProtect Data Domain Management Center has an SQL injection flaw in several release lines. A low-privileged remote attacker can exploit it to gain unauthorized access to systems the center manages.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","infrastructure","on-prem","powerprotect"],"not_affected_if":["version-outside-listed-ranges"],"how_to_check":"- Check the installed Data Domain Management Center version in the product UI or CLI; the affected ranges are listed in the description.\n- unknown for other checks; the sources do not say which configuration or endpoint is exposed.","fix":"- Upgrade Dell PowerProtect Data Domain Management Center to a fixed release for your line; the sources do not name the fixed version numbers.\n- unknown for other actions.","status":"open","published_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","triaged_at":"2026-10-28T11:33:15+00:00","updated_at":"2026-10-28T11:33:15+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-28T11:33:15Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Dell PowerProtect Data Domain Management Center to a fixed release for your line; the sources do not name the fixed version numbers.\n- unknown for other actions.","reach":"network","title":"Dell PowerProtect Data Domain Management Center: SQL injection grants unauthorized access to managed systems","impact":"high","summary":"Dell PowerProtect Data Domain Management Center has an SQL injection flaw in several release lines. A low-privileged remote attacker can exploit it to gain unauthorized access to systems the center manages.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","on-prem"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker gains unauthorized access to managed backup systems","analyst_note":"Find Dell's advisory for the fixed versions per release line and confirm the exact affected ranges and any workarounds.","how_to_check":"- Check the installed Data Domain Management Center version in the product UI or CLI; the affected ranges are listed in the description.\n- unknown for other checks; the sources do not say which configuration or endpoint is exposed.","needs_analyst":true,"not_affected_if":["version-outside-listed-ranges"],"who_is_affected":"Teams running Dell PowerProtect Data Domain Management Center in the listed Feature Release, LTS2024, LTS2025 or LTS2026 version ranges are affected. The sources say a low-privileged attacker with remote access can exploit it, so any reachable deployment is exposed. Systems on versions outside the listed ranges are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000644,"input_tokens":3436,"output_tokens":600,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-103792':17A,20A '-2026':16A,19A '7.13.1.0':79C '7.13.1.80':81C '7.7.1.0':73C '8.3.1.0':85C '8.3.1.40':87C '8.6.1.0':91C '8.6.1.20':93C '8.8':75C 'access':11A,58B,115C,124C 'attack':51B,112C 'backup':21B 'center':6A,36B,62B,69C 'command':105C 'contain':94C 'could':116C 'cve':15A,18A 'data':3A,23B,33B,66C 'data-domain':22B 'dell':1A,25B,31B,64C 'domain':4A,24B,34B,67C 'element':100C 'exploit':53B,118C 'featur':70C 'flaw':41B 'gain':56B 'grant':9A 'improp':96C 'infrastructur':26B 'inject':8A,40B,107C 'lead':121C 'line':45B 'low':48B,110C 'low-privileg':47B 'lts2024':76C 'lts2025':82C 'lts2026':88C 'manag':5A,13A,35B,63B,68C,126C 'neutral':97C 'on-prem':27B 'potenti':117C 'powerprotect':2A,30B,32B,65C 'prem':29B 'privileg':49B,111C 'releas':44B,71C,77C,83C,89C 'remot':50B,114C 'sever':43B 'special':99C 'sql':7A,39B,104C,106C 'system':14A,60B,127C 'unauthor':10A,57B,123C 'use':101C 'version':72C,78C,84C,90C 'vulner':108C,120C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain Management Center in the listed Feature Release, LTS2024, LTS2025 or LTS2026 version ranges are affected. The sources say a low-privileged attacker with remote access can exploit it, so any reachable deployment is exposed. Systems on versions outside the listed ranges are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-103792","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103792","severity":null,"published_at":"2026-10-28T11:17:14+00:00","modified_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","fetched_at":"2026-10-28T11:32:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}