CVE-2026-103799

Summary

A missing authorization check in Dell PowerProtect Data Domain Management Center allows a low-privileged remote attacker to perform unauthorized operations on managed systems across multiple feature and LTS releases.

Exploitability

Exploitation requires only low-privilege network access; no special conditions or user interaction are needed, but the attacker must already hold a valid authenticated session with minimal permissions.

Blast radius

Successful exploitation could enable an attacker to execute unauthorized administrative actions on managed storage systems, compromising data integrity and system availability without affecting confidentiality directly.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Dell PowerProtect Data Domain Management Center version 7.13.1.81 or later for LTS2024, 8.3.1.41 or later for LTS2025, 8.6.1.21 or later for LTS2026, or 8.8.0.1 or later for Feature Release 8.x.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.