{"id":"CVE-2026-103799","kind":"vulnerability","aliases":["CVE-2026-103799"],"related":[],"title":"Dell PowerProtect Data Domain Management Center: missing authorization lets low-privileged users act","description":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.","summary":"Several Dell PowerProtect Data Domain Management Center release lines lack an authorization check on some operations. A low-privileged remote user can perform unauthorized operations on systems managed by the appliance.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","infrastructure","on-prem","powerprotect"],"not_affected_if":["management-interface-isolated","version-outside-ranges"],"how_to_check":"- Check the installed Management Center version in the appliance UI or CLI, then compare it with the affected ranges in the Dell advisory: `7.7.1.0` through `8.8`, `7.13.1.0` through `7.13.1.80`, `8.3.1.0` through `8.3.1.40`, `8.6.1.0` through `8.6.1.20`.\n- Review which accounts have low-privileged access to the Management Center and whether they are reachable from outside the management network.","fix":"- Move to a fixed Management Center release from Dell's advisory for your release line (fixed versions unknown from the sources).\n- Restrict access to the management interface to trusted administrative networks until patched.","status":"open","published_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","triaged_at":"2026-10-28T11:33:15+00:00","updated_at":"2026-10-28T11:33:15+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-28T11:33:15Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed Management Center release from Dell's advisory for your release line (fixed versions unknown from the sources).\n- Restrict access to the management interface to trusted administrative networks until patched.","reach":"network","title":"Dell PowerProtect Data Domain Management Center: missing authorization lets low-privileged users act","impact":"high","summary":"Several Dell PowerProtect Data Domain Management Center release lines lack an authorization check on some operations. A low-privileged remote user can perform unauthorized operations on systems managed by the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","on-prem"],"confidence":0.5,"needs_auth":"yes","worst_case":"Low-privileged remote user performs unauthorized operations on managed backup systems","analyst_note":"Find the Dell security advisory for this CVE to confirm fixed versions and exact affected operations; NVD text alone does not give them.","how_to_check":"- Check the installed Management Center version in the appliance UI or CLI, then compare it with the affected ranges in the Dell advisory: `7.7.1.0` through `8.8`, `7.13.1.0` through `7.13.1.80`, `8.3.1.0` through `8.3.1.40`, `8.6.1.0` through `8.6.1.20`.\n- Review which accounts have low-privileged access to the Management Center and whether they are reachable from outside the management network.","needs_analyst":true,"not_affected_if":["version-outside-ranges","management-interface-isolated"],"who_is_affected":"Teams running Dell PowerProtect Data Domain Management Center in the affected release ranges, especially where low-privileged accounts exist or the interface is reachable over the network. Systems on unaffected versions or with the management interface isolated to administrators can skip it. Exact fixed versions are unknown from the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000686,"input_tokens":3413,"output_tokens":689,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-103799':17A,20A '-2026':16A,19A '7.13.1.0':78C '7.13.1.80':80C '7.7.1.0':72C '8.3.1.0':84C '8.3.1.40':86C '8.6.1.0':90C '8.6.1.20':92C '8.8':74C 'access':104C 'act':14A 'applianc':62B 'attack':101C 'author':8A,42B,96C 'backup':21B 'center':6A,37B,68C 'check':43B 'contain':93C 'could':105C 'cve':15A,18A 'data':3A,23B,34B,65C 'data-domain':22B 'dell':1A,25B,32B,63C 'domain':4A,24B,35B,66C 'exploit':107C 'featur':69C 'infrastructur':26B 'lack':40B 'lead':110C 'let':9A 'line':39B 'low':11A,49B,99C 'low-privileg':10A,48B 'lts2024':75C 'lts2025':81C 'lts2026':87C 'manag':5A,36B,59B,67C,116C 'miss':7A,95C 'on-prem':27B 'oper':46B,56B,114C 'perform':54B 'potenti':106C 'powerprotect':2A,30B,33B,64C 'prem':29B 'privileg':12A,50B,100C 'releas':38B,70C,76C,82C,88C 'remot':51B,103C 'sever':31B 'system':58B,113C,117C 'unauthor':55B,112C 'user':13A,52B 'version':71C,77C,83C,89C 'vulner':97C,109C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain Management Center in the affected release ranges, especially where low-privileged accounts exist or the interface is reachable over the network. Systems on unaffected versions or with the management interface isolated to administrators can skip it. Exact fixed versions are unknown from the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-103799","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103799","severity":null,"published_at":"2026-10-28T11:17:14+00:00","modified_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","fetched_at":"2026-10-28T11:32:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}