Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2494 articles · 111759 vulns · 36/41 feeds (7d)
← Back to list
7.2
CVE-2026-23776EXPLOITEDPATCHED
dell · powerprotect data domain

CVE-2026-23776: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate Validation vulnerability in certificate-based login. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected Products

VendorProductVersions
dellpowerprotect data domain0, 0, 0, 0

References

  • https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities(vendor-advisory)

Related News (1 articles)

Tier C
VulDB2d ago
CVE-2026-23776 | Dell PowerProtect Data Domain up to 8.5 certificate validation (dsa-2026-060)
→ No new info (linked only)
CVSS 3.17.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
8.3.1.30 or later7.13.1.70 or later8.6.0.0 or later2.7.9 with DD OS 8.3.1.30
CWECWE-295
PublishedApr 17, 2026
Last enriched2d agov2
Trending Score36
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2026-35074EXP
CVE-2026-35074: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2
Trending: 37
MEDIUMCVE-2026-35072EXP
CVE-2026-35072: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2
Trending: 37
MEDIUMCVE-2026-35153EXP
CVE-2026-35153: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2
Trending: 37
MEDIUMCVE-2025-46607EXP
CVE-2025-46607: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 cont
Trending: 37
MEDIUMCVE-2025-46605EXP
CVE-2025-46605: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 cont
Trending: 37

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 17, 2026
Discovered by ZDM
Apr 17, 2026
Updated: severity, activelyExploited
Apr 17, 2026
Actively Exploited
Apr 18, 2026
Patch Available
Apr 18, 2026

Version History

v2
Last enriched 2d ago
v2Tier C2d ago

Updated severity to CRITICAL and marked the vulnerability as actively exploited.

severityactivelyExploited
via VulDB
v12d ago

Initial creation