CVE-2026-90721: Path Traversal

Q: Who is realistically able to exploit this issue?

Exploitation requires a high-privileged attacker with local access to an affected Dell PowerProtect Data Domain system. The provided vector indicates no user interaction is required.

Q: Is this exposed to unauthenticated remote attackers?

The provided data identifies the attack vector as local and requires high privileges. It does not indicate unauthenticated or network-based exploitation.

Q: What is the expected impact if exploitation succeeds?

Successful exploitation could lead to denial of service. The supplied severity vector also indicates low integrity and availability impact, with no confidentiality impact.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·08:28 AM

Data Sourced

via MITRE·08:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically able to exploit this issue?

Exploitation requires a high-privileged attacker with local access to an affected Dell PowerProtect Data Domain system. The provided vector indicates no user interaction is required.

Is this exposed to unauthenticated remote attackers?

The provided data identifies the attack vector as local and requires high privileges. It does not indicate unauthenticated or network-based exploitation.

What is the expected impact if exploitation succeeds?