CVE-2026-110540
Last modified
CVE-2026-110540 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation..
Description
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Dell | PowerProtect Data Domain Management Center | < 8.9.0.0 or later; < 7.13.1.90 or later; < 8.3.1.50 or later; < 8.6.1.30 or later |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-110540?
How severe is CVE-2026-110540?
How do I fix CVE-2026-110540?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110527The WP User Manager WordPress plugin before 2.9.20 does not…5.3
- CVE-2026-110530The FeedWordPress plugin for WordPress is vulnerable to Stor…7.2
- CVE-2026-110533The FV Flowplayer Video Player plugin for WordPress is vulne…6.4
- CVE-2026-110536A vulnerability was determined in D-Link DIR-868L 2.01b05. T…10
- CVE-2026-110537The Essential Addons for Elementor WordPress plugin before …3.8
- CVE-2026-11054Use after free in WebRTC in Google Chrome prior to 149.0.782…8.8
- CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.…7.2
- CVE-2026-11055Use after free in ANGLE in Google Chrome on Windows prior to…8.8
- CVE-2026-11056Insufficient validation of untrusted input in SiteIsolation …9.6
- CVE-2026-11057Uninitialized Use in Skia in Google Chrome prior to 149.0.78…6.5
- CVE-2026-11058Integer overflow in CredentialProvider in Google Chrome on W…7.5
- CVE-2026-11059Use after free in Blink in Google Chrome prior to 149.0.7827…8.8
Are you affected by CVE-2026-110540?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST