VYPR
← All advisories
High severity7.2NVD Advisory· Published Apr 17, 2026· Updated Apr 20, 2026

CVE-2026-23776

CVE-2026-23776

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate Validation vulnerability in certificate-based login. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Dell/Powerprotect Dp Series Appliance
    cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*
    Range: <2.7.9
  • Dell/Data Domain Operating System2 versions
    cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*range: >=7.7.1.0,<7.13.1.70
    • (no CPE)range: Feature Release 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, LTS2024 7.13.1.0 through 7.13.1.60
  • Dell/Powerprotect Data Domainllm-fuzzy
    Range: Feature Release 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, LTS2024 7.13.1.0 through 7.13.1.60

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.