CVE-2026-86385: High severity Dell PowerProtect Data Domain vulnerability
Published Oct 28, 2026
·Updated
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
Affected Software
1 affected component
Dell PowerProtect Data Domain>=7.7.1.0<=8.8
Event History
Oct 28, 2026
CVE Published
via MITRE·09:47 AM
Data Sourced
via MITRE·09:47 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.8 are affected.
2
What access does an attacker need to exploit this issue?
An attacker needs remote access and low-privileged access to the affected system. No user interaction is required.
3
What is the likely impact of successful exploitation?
Successful exploitation could allow elevation of privileges. The reported impact includes high confidentiality, integrity, and availability impact.