---
id: "CVE-2026-110540"
kind: "vulnerability"
aliases: ["CVE-2026-110540"]
title: "Dell PowerProtect Data Domain Management Center: missing authorization allows unauthorized operations"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["backup", "data-domain", "dell", "powerprotect", "vendor"]
not_affected_if: ["version-outside-affected-ranges"]
published_at: "2026-10-28T11:17:14+00:00"
first_seen_at: "2026-10-28T11:32:27+00:00"
updated_at: "2026-10-28T11:33:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110540", "first_seen_at": "2026-10-28T11:32:27+00:00"}]
---

# Dell PowerProtect Data Domain Management Center: missing authorization allows unauthorized operations

Several Dell PowerProtect Data Domain Management Center release lines contain a missing authorization check. A low-privileged remote user can perform operations they should not be allowed to perform.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Data Domain Management Center version against the affected ranges listed in the Dell advisory: Feature Release `7.7.1.0` through `8.8`, LTS2024 `7.13.1.0` through `7.13.1.80`, LTS2025 `8.3.1.0` through `8.3.1.40`, LTS2026 `8.6.1.0` through `8.6.1.20`.

## Fix

- Move to a fixed release from Dell's advisory for your release line; the sources do not list the fixed version numbers.

## Timeline

- 2026-10-28T11:32:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110540

## From the sources

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_