CVE-2026-86380: Integer Overflow
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a high-privileged attacker who already has remote access to an affected Dell PowerProtect Data Domain system. The attack does not require user interaction and has low attack complexity.
What versions are affected?
Affected Feature Release versions are 7.7.1.0 through 8.8. Affected LTS releases are LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.
What is the potential impact if exploited?
A successful exploit could allow the attacker to bypass a protection mechanism. The reported impact includes high confidentiality, integrity, and availability effects.