{"id":"CVE-2026-90731","kind":"vulnerability","aliases":["CVE-2026-90731"],"related":[],"title":"Dell PowerProtect Data Domain: stack overflow lets privileged remote user crash service","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.","summary":"Several Dell PowerProtect Data Domain release lines contain a stack-based buffer overflow. A highly privileged attacker with remote access can trigger it to cause a denial of service.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["no-remote-admin-access","versions-outside-listed-ranges"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20)\n- Confirm which admin accounts can reach the management interface remotely","fix":"- Move Data Domain OS to a fixed release listed in the Dell advisory for your release line (fixed versions unknown from these sources)\n- Restrict management interface access to trusted admin networks until patched","status":"open","published_at":"2026-10-27T12:17:08+00:00","first_seen_at":"2026-10-27T12:31:38+00:00","triaged_at":"2026-10-27T12:32:17+00:00","updated_at":"2026-10-27T12:32:17+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-27T12:32:17Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a fixed release listed in the Dell advisory for your release line (fixed versions unknown from these sources)\n- Restrict management interface access to trusted admin networks until patched","reach":"network","title":"Dell PowerProtect Data Domain: stack overflow lets privileged remote user crash service","impact":"low","summary":"Several Dell PowerProtect Data Domain release lines contain a stack-based buffer overflow. A highly privileged attacker with remote access can trigger it to cause a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"Privileged remote attacker crashes the appliance, causing denial of service","analyst_note":"Fixed version numbers and vendor advisory URL are not in the sources; check the Dell security advisory for the patched release per line.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20)\n- Confirm which admin accounts can reach the management interface remotely","needs_analyst":true,"not_affected_if":["versions-outside-listed-ranges","no-remote-admin-access"],"who_is_affected":"Organizations running Dell PowerProtect Data Domain appliances in the affected release ranges, with remote management access enabled. Exploitation requires a highly privileged account, so systems with tightly controlled admin access carry lower practical risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000665,"input_tokens":3413,"output_tokens":648,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-90731':15A,18A '7.13.1.0':71C '7.13.1.80':73C '7.7.1.0':65C '8.3.1.0':77C '8.3.1.40':79C '8.6.1.0':83C '8.6.1.20':85C '8.7':67C 'access':48B,100C 'applianc':21B 'attack':45B,97C 'backup':20B 'backup-appli':19B 'base':39B,90C 'buffer':40B,91C 'caus':53B 'contain':35B,86C 'could':101C 'crash':11A 'cve':13A,16A 'data':3A,23B,31B,60C 'data-domain':22B 'dell':1A,25B,29B,58C 'denial':55B,108C 'domain':4A,24B,32B,61C 'exploit':103C 'featur':62C 'high':43B,95C 'infrastructur':26B 'lead':106C 'let':7A 'line':34B 'lts2024':68C 'lts2025':74C 'lts2026':80C 'overflow':6A,41B,92C 'potenti':102C 'powerprotect':2A,27B,30B,59C 'privileg':8A,44B,96C 'releas':33B,63C,69C,75C,81C 'remot':9A,47B,99C 'servic':12A,57B,110C 'sever':28B 'stack':5A,38B,89C 'stack-bas':37B,88C 'trigger':50B 'user':10A 'version':64C,70C,76C,82C 'vulner':93C,105C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerProtect Data Domain appliances in the affected release ranges, with remote management access enabled. Exploitation requires a highly privileged account, so systems with tightly controlled admin access carry lower practical risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T12:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-90731","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90731","severity":null,"published_at":"2026-10-27T12:17:08+00:00","modified_at":"2026-10-27T12:17:08+00:00","first_seen_at":"2026-10-27T12:31:38+00:00","fetched_at":"2026-10-27T12:31:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}