---
id: "CVE-2026-90720"
kind: "vulnerability"
aliases: ["CVE-2026-90720"]
title: "Dell PowerProtect Data Domain: integrity check flaw lets admins bypass protections"
severity: "medium"
cvss: 6.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["backup", "data-domain", "dell", "infrastructure", "powerprotect", "self-hosted"]
not_affected_if: ["version-outside-listed-ranges"]
published_at: "2026-10-28T09:17:08+00:00"
first_seen_at: "2026-10-28T09:32:03+00:00"
updated_at: "2026-10-28T09:34:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90720", "first_seen_at": "2026-10-28T09:32:03+00:00"}]
---

# Dell PowerProtect Data Domain: integrity check flaw lets admins bypass protections

Several Dell PowerProtect Data Domain release lines fail to validate an integrity check value correctly. A high-privileged local attacker could bypass a protection mechanism.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run the appliance's version command or check the web UI for the installed release and compare it with the affected ranges listed in the description (7.7.1.0 to 8.8, 7.13.1.0 to 7.13.1.80, 8.3.1.0 to 8.3.1.40, 8.6.1.0 to 8.6.1.20)

## Fix

- Move to a fixed release listed in Dell's security advisory for CVE-2026-90720 (unknown from the sources)

## Timeline

- 2026-10-28T09:32:03+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-90720

## From the sources

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_