CVE-2026-23777
Analyzed Analyzed - Analysis Complete
Information Exposure in Dell PowerProtect Data Domain DD OS

Publication date: 2026-04-17

Last updated on: 2026-05-05

Assigner: Dell

Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-17
Last Modified
2026-05-05
Generated
2026-06-16
AI Q&A
2026-04-17
EPSS Evaluated
2026-06-14
NVD
CVE-2026-23777
EUVD
EUVD-2026-23411
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
dell powerprotect_data_domain From 8.3.1.0 (inc) to 8.3.1.20 (inc)
dell powerprotect_data_domain From 7.13.1.0 (inc) to 7.13.1.50 (inc)
dell data_domain_operating_system From 7.7.1.0 (inc) to 8.5.0.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) in certain versions. It allows a low privileged attacker with remote access to potentially expose sensitive information without authorization.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized exposure of sensitive information. This means that an attacker with limited privileges and remote access might be able to access confidential data that should otherwise be protected.

Compliance Impact

This vulnerability involves the exposure of sensitive information to an unauthorized actor, which could potentially impact compliance with data protection regulations such as GDPR and HIPAA. Unauthorized disclosure of sensitive data may lead to violations of these standards, which require strict controls to protect personal and health information.

However, specific details on how this vulnerability affects compliance with these regulations are not provided in the available information.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23777. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart