{"id":"CVE-2026-103799","published":"2026-10-28T11:17:14Z","modified":"2026-10-28T14:13:52Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…","vendor":"Dell","product":"PowerProtect Data Domain Management Center","tier":"core","eol":null,"description":{"text":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.","provenance":"source","from":"NVD"},"summary":{"text":"Dell PowerProtect Data Domain Management Center contains a Missing Authorization flaw across several feature and LTS release lines, as listed in the affected version ranges. An attacker with low-privileged credentials and remote network access, requiring no user interaction, could potentially perform unauthorized system operations on managed systems.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:25:29Z"},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.0034,"percentile":0.27521,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":2,"pulses":[{"name":"Known_Cve | Oct 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/6ae35d945cba1d70e2bf3a79","created":"2026-10-29"},{"name":"Known_Cve | Oct 29, 2026 | Part 3/3","url":"https://otx.alienvault.com/pulse/6ae20c338ef6b2d900217a8b","created":"2026-10-28"}],"provenance":"machine"},"cwes":[{"id":"CWE-862","name":"Missing Authorization"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-111992","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111992","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-28","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103799","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":13.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":5.5,"detail":"percentile 0.2752"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":6.72,"detail":"base score 9.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}