VDB

CVE-2026-103799

CVE-2026-103799 PUBLISHED CVSS 9.6 CRITICAL

Reported by dell · Published October 28, 2026

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
PowerProtect Data Domain Management CenterDell8.9.0.0 or later, 8.6.1.30 or later, 8.3.1.50 or later, 7.13.1.90 or later

Risk scores

CVSS 3.1
9.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Affected products

VendorProductVersions
DellPowerProtect Data Domain Management Center0, 0, 0
DellPowerProtect Data Domain Management Center0, 0, 0

Timeline

  • Oct 28, 2026 Coalition ESS Score
  • Oct 28, 2026 CVE Published
  • Oct 29, 2026 EPSS Score (2 in total, the first dated here)
  • Nov 3, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-103799
vulnetix vdb fixes CVE-2026-103799

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-103799/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • vendor-advisory
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›