CVE-2026-41123 describes an improper access control vulnerability (CWE-284) in Dell PowerProtect Data Domain's RBAC implementation. The affected versions include 7.7.1.0 through 8.6, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70. This flaw allows a low privileged attacker with remote access to potentially tamper with information. The CVSS v3.1 base score is 4.3, reflecting a medium severity impact primarily on integrity. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with low privileges and remote access to bypass proper access controls, potentially leading to unauthorized information tampering. There is no impact on confidentiality or availability reported. The medium severity score reflects the limited but meaningful risk to data integrity within affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Dell's advisories for updates. Until a patch is available, restrict remote access to affected systems and review RBAC configurations to minimize exposure where possible.