CVE-2026-23853: dell data_domain_operating_system Use of Weak Credentials

Vulnerability summary

CVE-2026-23853 is a high (CVSS 8.4) Use of Weak Credentials vulnerability in dell data_domain_operating_system. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.6% of scored vulnerabilities.

Timeline

1. 17-04-2026
   PublishedVulnerability first disclosed.
2. 18-04-2026
   Last modifiedVulnerability information updated.

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to the system.

• CWE-1391Use of Weak CredentialsThe product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.