CVE-2026-23777

CVE-2026-23777 is an information disclosure vulnerability affecting Dell PowerProtect Data Domain across multiple operating system versions, including Feature Release versions 7.7.1.0 through 8.5, LTS2025 release 8.3.1.0 through 8.3.1.20, and LTS2024 release 7.13.1.0 through 7.13.1.50. The vulnerability allows a low-privileged attacker with remote network access to expose sensitive information stored on affected systems. The vulnerability carries a CVSS 3.1 score of 4.3 (Medium severity) with a network attack vector and low attack complexity, indicating that exploitation requires minimal additional conditions. The impact is limited to confidentiality breaches with no effect on integrity or availability. The EPSS score of 0.0001 indicates extremely low probability of widespread exploitation compared to other CVEs. There is no evidence of active exploitation, and the vulnerability has not been added to CISA's Known Exploited Vulnerabilities catalog. The Hot List status remains inactive, and no public exploit code or significant community attention has been reported. Organizations should prioritize patching based on exposure levels and network access controls rather than immediate critical response.