CVE-2026-86384: Critical severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker with remote access to an affected Dell PowerProtect Data Domain system could potentially exploit the vulnerability. No credentials or user interaction are required.
What is the potential impact after exploitation?
The vulnerability can expose credentials. Those credentials may allow access to the system with the privileges assigned to the compromised user.
Which releases are affected?
Affected releases are Feature Release 7.7.1.0 through 8.8; LTS2024 7.13.1.0 through 7.13.1.80; LTS2025 8.3.1.0 through 8.3.1.40; and LTS2026 8.6.1.0 through 8.6.1.20.