CVE-2026-86388: Path Traversal
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Dell PowerProtect Data Domain deployments running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20 are affected.
Does exploitation require an account or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated attacker with remote access, with no user interaction required.
What could an attacker gain through exploitation?
Successful exploitation could lead to filesystem access for the attacker. The provided severity vector indicates low confidentiality impact and no stated integrity or availability impact.