CVE-2025-36568 HIGH

CVE-2025-36568

Vendor Dell
Product PowerProtect Data Domain BoostFS
Weakness CWE-522 · Insufficiently protected credentials
Published April 17, 2026
Last update April 18, 2026

CVSS base score

7.8/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an insufficiently protected credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to credential exposure. The attacker may be able to use the exposed credentials to access the system with privileges of the compromised account.

Key dates

02Disclosure timeline

April 17, 2026 CVE published
April 18, 2026 Record updated