CVE-2026-23775 is a vulnerability in Dell PowerProtect Data Domain appliances that causes insertion of sensitive information into log files (CWE-532). It affects DD OS Feature Release versions 8.0 to 8.5 and LTS2025 release versions 8.3.1.0 to 8.3.1.10, specifically when retention lock is enabled. A low privileged attacker with remote access could potentially exploit this to expose credentials, but further authentication by a high privileged user is required to leverage the compromised credentials. The CVSS 3.1 base score is 7.6, indicating high severity. No patch or official fix has been documented in the provided data.

The vulnerability could lead to exposure of sensitive credential information through log files on affected Dell PowerProtect Data Domain appliances with retention lock enabled. This exposure could facilitate unauthorized access if a high privileged DD user authorizes authentication attempts using the compromised credentials. The overall impact includes potential confidentiality loss and high integrity and availability impact due to elevated access requirements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to affected systems, especially those with retention lock enabled, and monitor for unauthorized access attempts involving high privileged DD users. Avoid enabling retention lock on vulnerable versions if possible, pending vendor guidance.