#PowerProtect
All CosmicBytez Labs articles tagged #PowerProtect, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-86384: Dell PowerProtect Data Domain Hard-Coded Cryptographic Key (CVSS 9.8)
A hard-coded cryptographic key in Dell PowerProtect Data Domain lets an unauthenticated attacker compromise the appliance. CVSS 9.8; upgrade DD OS now.
- Security
CVE-2026-86397: Dell PowerProtect Data Domain Improper Authentication Flaw (CVSS 9.8)
An unauthenticated network attacker can abuse an authentication flaw in Dell PowerProtect Data Domain. Fixed in DD OS 8.9.0.0, 7.13.1.90, 8.3.1.50, 8.6.1.30.
- Security
CVE-2026-86400: Dell PowerProtect Data Domain Auth Flaw Enables Unauthenticated Root Command Execution
CVE-2026-86400 (CVSS 9.8) lets an unauthenticated attacker bypass controls on Dell Data Domain and run commands as root. Upgrade to a fixed DD OS build.
- Security
CVE-2026-90717: Dell Data Domain Management Center Authentication Bypass by Spoofing (CVSS 9.1)
A spoofing-based authentication bypass in Dell PowerProtect Data Domain Management Center is rated CVSS 9.1. Patch to the fixed DD OS builds in DSA-2026-416.
- Security
CVE-2026-73600: Dell PowerProtect Data Manager Stack Buffer Overflow
A stack buffer overflow in Dell PowerProtect Data Manager's file-level restore agent lets a high-privileged attacker trigger information disclosure.
- Security
CVE-2026-53481: Dell PowerProtect Data Domain Path Traversal — CVSS 9.8
A critical path traversal vulnerability in Dell PowerProtect Data Domain backup appliances allows authenticated low-privilege users to read and write...
- Security
CVE-2026-53483: Dell PowerProtect Data Domain Authentication Bypass — CVSS 9.8
A critical authentication bypass in Dell PowerProtect Data Domain allows unauthenticated remote attackers to gain access to the backup platform. Combined...
- Security
CVE-2026-49814: Dell PowerProtect Data Domain OS Command Injection
A high-severity OS command injection vulnerability in Dell PowerProtect Data Domain allows authenticated remote attackers to execute arbitrary commands...
- Security
CVE-2025-36568: Dell PowerProtect Data Domain BoostFS
A high-severity insufficiently protected credentials vulnerability in Dell PowerProtect Data Domain BoostFS allows low-privileged local attackers to...