CVE-2026-23775General(dell / data_domain_operating_system)

LOWCVSS 5.7 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to credential exposures. Authentication attempts as the compromised user would need to be authorized by a high privileged DD user. This vulnerability only affects systems with retention lock enabled.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • data_domain_operating_system

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
data_domain_operating_system

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-17: 3Technical Details · 2026-04-17: 104-17
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-23775 Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 throug… https://www.cve.org/CVERecord?id=CVE-2026-23775

    Post summary

    The text merely cites the CVE identifier and links to its CVE record without providing any technical details, exploitation information, or patch status.

    0000049
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-23775 Sensitive Information Insertion in Dell PowerProtect Data Domain ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23775 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The text lists CVE‑2026‑23775 with a brief description and links to alert pages, but provides no further technical, exploit, or patch details.

    0000029
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-23775 Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 thro… CVSS 7.6 Full analysis → https://sec.kaitan.id/cves/CVE-2026-23775 #Dell #CyberSecurity #InfoSec

    Post summary

    The post announces a high‑severity CVE‑2026‑23775 for Dell PowerProtect Data Domain appliances, providing its CVSS score but no PoC, exploit, or patch information.

    000001
    145 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSdelldata_domain_operating_system---

Explore more