CVE-2026-86383: Path Traversal
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Dell PowerProtect Data Domain deployments running Feature Release versions 7.7.1.0 through 8.8, LTS2025 versions 8.3.1.0 through 8.3.1.40, or LTS2026 versions 8.6.1.0 through 8.6.1.20 are affected if a high-privileged attacker has remote access.
What level of access does an attacker need?
Exploitation requires remote access and high privileges. No user interaction is required, and the attack complexity is rated low.
What is the likely impact if exploited?
The vulnerability can lead to information disclosure through path traversal. The provided impact assessment indicates high confidentiality impact, with no integrity or availability impact stated.