Unrated severityNVD Advisory· Published Aug 4, 2025· Updated Feb 26, 2026
CVE-2025-36594
CVE-2025-36594
Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system integrity and availability.
Affected products
4- Range: 7.7.1.0 through 8.3.0.15, 7.13.1.0 through 7.13.1.25, 7.10.1.0 through 7.10.1.60
- Dell/PowerProtect Data Domain Feature Releasev5Range: 7.7.1.0
- Dell/PowerProtect Data Domain LTS 2023v5Range: 7.10.1.0
- Dell/PowerProtect Data Domain LTS2024v5Range: 7.13.1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.