CVE-2026-86391: Medium severity Dell Powerprotect Data Domain Management Center vulnerability
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs remote access to the affected Dell PowerProtect Data Domain Management Center and low-privileged credentials. The issue does not describe exploitation by an unauthenticated attacker.
What is the expected impact of successful exploitation?
Successful exploitation could lead to a denial of service. The supplied severity vector indicates low integrity and availability impact, with no confidentiality impact.
Which release families are affected?
Affected versions are Feature Release 7.7.1.0 through 8.8; LTS2024 7.13.1.0 through 7.13.1.80; LTS2025 8.3.1.0 through 8.3.1.40; and LTS2026 8.6.1.0 through 8.6.1.20.