CVE-2026-90726: Path Traversal
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Systems running Dell PowerProtect Data Domain in the affected Feature Release, LTS2024, LTS2025, or LTS2026 version ranges are exposed. Exploitation requires local access and high privileges, so it is primarily relevant where highly privileged local accounts or administrative access may be compromised or misused.
What access does an attacker need to exploit it?
An attacker needs local access to the affected system and high privileges. No user interaction is required according to the supplied vector.
What is the expected impact of successful exploitation?
Successful exploitation could cause a denial of service. The provided severity vector indicates no confidentiality impact and identifies integrity and availability impacts.