CVE-2026-86398: Path Traversal
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Affected releases are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20.
What does an attacker need to exploit this issue?
An attacker needs remote access to the affected system and low-privileged access. No user interaction is required.
What could exploitation allow?
Successful exploitation could give the attacker filesystem access. The vulnerability is rated high severity with potential impact to confidentiality, integrity, and availability.