CVE-2026-86389: Integer Overflow

Q: Who is realistically exposed to this vulnerability?

Dell PowerProtect Data Domain deployments running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20 are affected.

Q: What access does an attacker need to exploit it?

An attacker needs remote access to the affected system and high privileges. No user interaction is required.

Q: What is the potential impact of successful exploitation?

Successful exploitation could lead to code execution. The reported impact includes high confidentiality, integrity, and availability effects.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·09:33 AM

Data Sourced

via MITRE·09:33 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

Dell PowerProtect Data Domain deployments running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20 are affected.

What access does an attacker need to exploit it?

An attacker needs remote access to the affected system and high privileges. No user interaction is required.

What is the potential impact of successful exploitation?