CVE-2026-86393: High severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires an attacker to already hold high privileges and have remote access to an affected Dell PowerProtect Data Domain system. The vulnerability has low attack complexity and does not require user interaction.
Which releases are affected?
Affected Feature Release versions are 7.7.1.0 through 8.8. Affected LTS releases are LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.
What could successful exploitation allow?
A successful remote attacker could elevate privileges. The reported impact includes high confidentiality, integrity, and availability impact.