CVE-2026-90720
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Oct 28, 2026
CISA due date
—
The record
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
- CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
- CVE-2026-118776 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
- CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. CWE-354
- CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified… CWE-354
- CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-354
- CVE-2026-89320 `HmacShaCryptor.Hash` never hashed its input. CWE-354
- CVE-2026-35501 When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both… CWE-354