Vulnerabilities · 2h ago
NCSC-NL reported on October 30 that Dell had fixed 34 vulnerabilities across PowerProtect Data Domain, Data Domain Virtual Edition, and Data Domain Management Center.
Four critical Data Domain flaws let unauthenticated attackers remotely run commands, obtain credentials, or create privileged accounts. Three critical Management Center flaws let users with limited access reach managed systems, perform unauthorized actions, or gain higher privileges. The remaining flaws can also expose data, enable commands, or disrupt service.
If Data Domain appliances are remotely reachable in your environment, the exposure sits on the backup platform itself as well as in its management layer. Patching only Management Center would leave separate appliance vulnerabilities—and their potential consequences for backup infrastructure—unaddressed.
CVEs in this update
34 CVEs
Across PowerProtect Data Domain Management Center, PowerProtect Data Domain, PowerProtect Data Domain Virtual Edition.
7 critical · 17 high · 9 medium · 0 low
0 in CISA KEV · 5 with EPSS above 1%
Highest severity: CVE-2026-86400 · 9.8 CRITICAL
Highest EPSS: CVE-2026-86379 · 2.8%
Showing the top 10 by KEV, EPSS, and severity.
1 source covering this story
Kwetsbaarheden verholpen in Dell PowerProtect Data Domain
De kritieke wetsbaarheden met kenmerk CVE-2026-103780, CVE-2026-86384, CVE-2026-86397 en CVE-2026-86400 in Dell PowerProtect Data Domain, hebben een CVSS-score van 9.8.
Part of the PlainSec briefing for 2026-10-30