{"id":"CVE-2026-56084","kind":"vulnerability","aliases":["CVE-2026-56084"],"related":[],"title":"Dell PowerProtect Data Domain: unauthenticated server-side request forgery flaw","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.","summary":"Several Dell PowerProtect Data Domain release lines contain a server-side request forgery flaw. An unauthenticated remote attacker could make the appliance send requests to internal or other destinations on its behalf.","severity":"medium","cvss":5.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","infrastructure","powerprotect","self-hosted"],"not_affected_if":["no-remote-access","unaffected-version"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges: Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20\n- Confirm whether the appliance is reachable from untrusted networks (unknown from sources)","fix":"- Move Data Domain OS to a fixed release for your line; the fixed version numbers are unknown from the sources, so check Dell's advisory\n- Restrict management and network access to the appliance until patched","status":"open","published_at":"2026-10-27T12:17:08+00:00","first_seen_at":"2026-10-27T12:31:38+00:00","triaged_at":"2026-10-27T12:32:11+00:00","updated_at":"2026-10-27T12:32:11+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-27T12:32:11Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a fixed release for your line; the fixed version numbers are unknown from the sources, so check Dell's advisory\n- Restrict management and network access to the appliance until patched","reach":"network","title":"Dell PowerProtect Data Domain: unauthenticated server-side request forgery flaw","impact":"medium","summary":"Several Dell PowerProtect Data Domain release lines contain a server-side request forgery flaw. An unauthenticated remote attacker could make the appliance send requests to internal or other destinations on its behalf.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker makes the appliance issue server-side requests to internal targets","analyst_note":"Find the fixed versions and any required feature or configuration in Dell's advisory for CVE-2026-56084.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges: Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20\n- Confirm whether the appliance is reachable from untrusted networks (unknown from sources)","needs_analyst":true,"not_affected_if":["unaffected-version","no-remote-access"],"who_is_affected":"Organizations running Dell PowerProtect Data Domain appliances on one of the listed release lines that are reachable over the network. The sources do not say which features trigger the flaw, so appliances on unaffected versions or without remote access are likely outside the risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000665,"input_tokens":3422,"output_tokens":646,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-56084':14A,17A '7.13.1.0':74C '7.13.1.80':76C '7.7.1.0':68C '8.3.1.0':80C '8.3.1.40':82C '8.6.1.0':86C '8.6.1.20':88C '8.7':70C 'access':103C 'applianc':50B 'attack':46B,100C 'backup':18B 'behalf':60B 'contain':35B,89C 'could':47B,104C 'cve':12A,15A 'data':3A,20B,31B,63C 'data-domain':19B 'dell':1A,22B,29B,61C 'destin':57B 'domain':4A,21B,32B,64C 'exploit':106C 'featur':65C 'flaw':11A,42B 'forgeri':10A,41B,95C,115C 'host':27B 'infrastructur':23B 'intern':54B 'lead':109C 'line':34B 'lts2024':71C 'lts2025':77C 'lts2026':83C 'make':48B 'potenti':105C 'powerprotect':2A,24B,30B,62C 'releas':33B,66C,72C,78C,84C 'remot':45B,102C 'request':9A,40B,52B,94C,114C 'self':26B 'self-host':25B 'send':51B 'server':7A,38B,92C,112C 'server-sid':6A,37B,91C,111C 'sever':28B 'side':8A,39B,93C,113C 'ssrf':96C 'unauthent':5A,44B,99C 'version':67C,73C,79C,85C 'vulner':97C,108C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerProtect Data Domain appliances on one of the listed release lines that are reachable over the network. The sources do not say which features trigger the flaw, so appliances on unaffected versions or without remote access are likely outside the risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T12:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56084","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56084","severity":null,"published_at":"2026-10-27T12:17:08+00:00","modified_at":"2026-10-27T12:17:08+00:00","first_seen_at":"2026-10-27T12:31:38+00:00","fetched_at":"2026-10-27T12:31:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}