{"id":"CVE-2026-90720","kind":"vulnerability","aliases":["CVE-2026-90720"],"related":[],"title":"Dell PowerProtect Data Domain: integrity check flaw lets admins bypass protections","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.","summary":"Several Dell PowerProtect Data Domain release lines fail to validate an integrity check value correctly. A high-privileged local attacker could bypass a protection mechanism.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","infrastructure","powerprotect","self-hosted"],"not_affected_if":["version-outside-listed-ranges"],"how_to_check":"- Run the appliance's version command or check the web UI for the installed release and compare it with the affected ranges listed in the description (7.7.1.0 to 8.8, 7.13.1.0 to 7.13.1.80, 8.3.1.0 to 8.3.1.40, 8.6.1.0 to 8.6.1.20)","fix":"- Move to a fixed release listed in Dell's security advisory for CVE-2026-90720 (unknown from the sources)","status":"open","published_at":"2026-10-28T09:17:08+00:00","first_seen_at":"2026-10-28T09:32:03+00:00","triaged_at":"2026-10-28T09:34:04+00:00","updated_at":"2026-10-28T09:34:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T09:34:04Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed release listed in Dell's security advisory for CVE-2026-90720 (unknown from the sources)","reach":"local","title":"Dell PowerProtect Data Domain: integrity check flaw lets admins bypass protections","impact":"medium","summary":"Several Dell PowerProtect Data Domain release lines fail to validate an integrity check value correctly. A high-privileged local attacker could bypass a protection mechanism.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"high-privileged local user bypasses a protection mechanism on the appliance","analyst_note":"Find Dell's advisory for CVE-2026-90720 to get the fixed versions and any workaround.","how_to_check":"- Run the appliance's version command or check the web UI for the installed release and compare it with the affected ranges listed in the description (7.7.1.0 to 8.8, 7.13.1.0 to 7.13.1.80, 8.3.1.0 to 8.3.1.40, 8.6.1.0 to 8.6.1.20)","needs_analyst":true,"not_affected_if":["version-outside-listed-ranges"],"who_is_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected feature or LTS release lines. The attacker must already hold high privileges on the local system, so exposure is limited to those with admin access. Systems on versions outside the listed ranges are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000631,"input_tokens":3419,"output_tokens":578,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-90720':14A,17A '7.13.1.0':67C '7.13.1.80':69C '7.7.1.0':61C '8.3.1.0':73C '8.3.1.40':75C '8.6.1.0':79C '8.6.1.20':81C '8.8':63C 'access':97C 'admin':9A 'attack':48B,94C 'backup':18B 'bypass':10A,50B,107C 'check':6A,40B,88C 'contain':82C 'correct':42B 'could':49B,98C 'cve':12A,15A 'data':3A,20B,31B,56C 'data-domain':19B 'dell':1A,22B,29B,54C 'domain':4A,21B,32B,57C 'exploit':100C 'fail':35B 'featur':58C 'flaw':7A 'high':45B,92C 'high-privileg':44B 'host':27B 'improp':84C 'infrastructur':23B 'integr':5A,39B,87C 'lead':103C 'let':8A 'line':34B 'local':47B,96C 'lts2024':64C 'lts2025':70C 'lts2026':76C 'mechan':53B,106C 'potenti':99C 'powerprotect':2A,24B,30B,55C 'privileg':46B,93C 'protect':11A,52B,105C 'releas':33B,59C,65C,71C,77C 'self':26B 'self-host':25B 'sever':28B 'valid':37B,85C 'valu':41B,89C 'version':60C,66C,72C,78C 'vulner':90C,102C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected feature or LTS release lines. The attacker must already hold high privileges on the local system, so exposure is limited to those with admin access. Systems on versions outside the listed ranges are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T09:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-90720","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90720","severity":null,"published_at":"2026-10-28T09:17:08+00:00","modified_at":"2026-10-28T09:17:08+00:00","first_seen_at":"2026-10-28T09:32:03+00:00","fetched_at":"2026-10-28T09:32:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}