CVE-2026-23777

Analyzed Analyzed - Analysis Complete

Information Exposure in Dell PowerProtect Data Domain DD OS

Publication date: 2026-04-17

Last updated on: 2026-05-05

Assigner: Dell

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-17

Last Modified

2026-05-05

Generated

2026-07-06

AI Q&A

2026-04-17

EPSS Evaluated

2026-07-05

NVD

CVE-2026-23777

EUVD

EUVD-2026-23411

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerprotect_data_domain	From 8.3.1.0 (inc) to 8.3.1.20 (inc)
dell	powerprotect_data_domain	From 7.13.1.0 (inc) to 7.13.1.50 (inc)
dell	data_domain_operating_system	From 7.7.1.0 (inc) to 8.5.0.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability affects Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) in certain versions. It allows a low privileged attacker with remote access to potentially expose sensitive information without authorization.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized exposure of sensitive information. This means that an attacker with limited privileges and remote access might be able to access confidential data that should otherwise be protected.

Compliance Impact

This vulnerability involves the exposure of sensitive information to an unauthorized actor, which could potentially impact compliance with data protection regulations such as GDPR and HIPAA. Unauthorized disclosure of sensitive data may lead to violations of these standards, which require strict controls to protect personal and health information.

However, specific details on how this vulnerability affects compliance with these regulations are not provided in the available information.

Hi! I’m here to help you understand CVE-2026-23777. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70