CVE-2026-23775 is a vulnerability in Dell PowerProtect Data Domain appliances with certain DD OS versions where sensitive information is improperly logged (CWE-532). This could lead to credential exposure if exploited by a low privileged attacker with remote access. Exploitation requires that authentication attempts as the compromised user be authorized by a high privileged DD user. The issue only affects systems with retention lock enabled. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

The vulnerability could lead to exposure of sensitive credentials through log files, potentially allowing unauthorized access if a high privileged DD user authorizes authentication attempts. This could impact confidentiality, integrity, and availability as indicated by the CVSS vector. However, exploitation requires multiple conditions including retention lock being enabled and high privileged user authorization, which limits the attack scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to affected systems, monitor for unauthorized access attempts, and limit high privileged user authorizations. Follow Dell's official communications for updates on patches or mitigations.