CVE-2026-41123 is an improper access control vulnerability (CWE-284) in Dell PowerProtect Data Domain's RBAC implementation. It affects versions 7.7.1.0 through 8.6, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70. A low privileged attacker with remote access could potentially exploit this vulnerability to tamper with information. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact, and no availability impact. No vendor advisory or patch information is currently available.

The vulnerability allows a low privileged remote attacker to bypass proper access controls in the RBAC system, potentially leading to unauthorized information tampering. There is no impact on confidentiality or availability reported. The medium severity rating reflects the limited but tangible risk of integrity compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to affected systems and monitor for unusual activity related to access control. Follow Dell's official communications for updates on patches or mitigations.