CVE-2026-86390: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Dell PowerProtect Data Domain deployments on Feature Release versions 7.7.1.0 through 8.8, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, or LTS2026 versions 8.6.1.0 through 8.6.1.20 are affected.
What does an attacker need to exploit this issue?
An attacker needs remote access to the affected system and a low-privileged account. No user interaction is required.
What is the likely impact of successful exploitation?
Successful exploitation could allow unauthorized access. The provided severity vector indicates confidentiality impact is high, while integrity and availability impacts are not identified.