CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0460 Vulnerabilities fixed in Dell PowerProtect Data Domain

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11879

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0460 Vulnerabilities fixed in Dell PowerProtect Data Domain

Dell patched multiple critical vulnerabilities in PowerProtect Data Domain, Data Domain Virtual Edition, and Data Domain Management Center. CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 in PowerProtect Data Domain carry a CVSS score of 9.8 and permit unauthenticated remote code execution, credential theft, and privileged account creation. Three critical vulnerabilities in Data Domain Management Center (CVE-2026-103799, CVE-2026-103792 with CVSS 9.6, and CVE-2026-90717 with CVSS 9.1) allow low-privileged remote attackers to gain unauthorized access to managed systems and escalate privileges.

Why it matters: Organizations running Dell PowerProtect Data Domain and Management Center must apply patches immediately; unauthenticated remote code execution at CVSS 9.8 poses severe risk to backup infrastructure and stored credentials.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary