CVE-2026-23776Disclosure(dell / data_domain_operating_system)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch dell data_domain_operating_system systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate Validation vulnerability in certificate-based login. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

dell CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

data_domain_operating_system
powerprotect_dp_series_appliance

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-04-17); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

dell

Products

data_domain_operating_systempowerprotect_dp_series_appliance

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-17	3	Disclosure2General1
2026-04-28	1	Patch1

Full discourse4 posts

Giuseppe Paternicola@giuseppe_1337165d
Patch
🚨 HIGH: CVE-2026-23776 (CVSS 7.2) affects Dell PowerProtect Data Domain DD OS 7[.]7[.]1[.]0-8.5. Improper certificate validation enables privilege escalation via certificate-based login. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/8AQNSbkGjv
Post summary
The message alerts on a high‑severity CVE affecting Dell PowerProtect, stresses immediate patching, and gives brief technical details, but provides no PoC or exploit evidence.
0000049
27 followersView on X
CVE@CVEnew175d
General
CVE-2026-23776 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1… https://www.cve.org/CVERecord?id=CVE-2026-23776
Post summary
The text merely references CVE‑2026‑23776 and lists affected Dell PowerProtect Data Domain OS versions, linking to the CVE record without disclosing any PoC, exploit code, patch, or detailed vulnerability information.
0000046
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds175d
Disclosure
CVE-2026-23776 Improper Certificate Validation in Dell PowerProtect Data Domain Operating System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23776
Post summary
The post announces CVE‑2026‑23776, noting an improper certificate validation flaw in Dell PowerProtect Data Domain OS and links to a vulnerability database entry, but provides no PoC, exploit, patch, or active exploitation details.
0000031
4.0K followersView on X
Kaitan ID Security@KaitanSecurity175d
Disclosure
⚠️ HIGH — CVE-2026-23776 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5… CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-23776 #Dell #CyberSecurity #InfoSec
Post summary
An announcement of CVE‑2026‑23776 affecting Dell PowerProtect Data Domain OS versions 7.7.1.0‑8.5, with a CVSS score of 7.2, and a link to a detailed analysis.
000002
145 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	dell	data_domain_operating_system	-	-	-
App	dell	powerprotect_dp_series_appliance	-	-	-

Explore more

Back to dashboard dell CVEs data_domain_operating_system vulnerabilities

What researchers are saying

CVE-2026-23776

Giuseppe Paternicola[verified]@giuseppe_1337Patch

The message alerts on a high‑severity CVE affecting Dell PowerProtect, stresses immediate patching, and gives brief technical details, but provides no PoC or exploit evidence.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

An announcement of CVE‑2026‑23776 affecting Dell PowerProtect Data Domain OS versions 7.7.1.0‑8.5, with a CVSS score of 7.2, and a link to a detailed analysis.

CVE@CVEnewGeneral

The text merely references CVE‑2026‑23776 and lists affected Dell PowerProtect Data Domain OS versions, linking to the CVE record without disclosing any PoC, exploit code, patch, or detailed vulnerability information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE‑2026‑23776, noting an improper certificate validation flaw in Dell PowerProtect Data Domain OS and links to a vulnerability database entry, but provides no PoC, exploit, patch, or active exploitation details.