CVE-2026-46467: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the risk of information exposure by restricting access to the affected system so that only authorized administrators can access it (given that a low privileged attacker with local access could exploit the vulnerability).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46467?
The severity of CVE-2026-46467 is classified as medium, with a score of 5.8.
How do I fix CVE-2026-46467?
To fix CVE-2026-46467, upgrade your Dell PowerProtect Data Domain to a patched version as recommended by Dell.
Which versions are affected by CVE-2026-46467?
CVE-2026-46467 affects Dell PowerProtect Data Domain versions 7.7.1.0 to 8.7 and specific LTS releases.
What type of vulnerability is CVE-2026-46467?
CVE-2026-46467 is an insertion of sensitive information into a log file vulnerability.
What is the risk associated with CVE-2026-46467?
The risk associated with CVE-2026-46467 is rated at 45, indicating a notable security concern.