CVE-2026-92665: Medium severity Dell PowerProtect Data Domain vulnerability

Q: Who is exposed to exploitation?

Any affected Dell PowerProtect Data Domain system reachable by a remote unauthenticated attacker is exposed. The vulnerability does not require credentials or user interaction.

Q: What is the expected impact if exploitation succeeds?

Successful exploitation could cause a denial of service. The provided information does not indicate confidentiality or integrity impact.

Q: Which release lines are affected?

Affected versions are Feature Release 7.7.1.0 through 8.8; LTS2024 7.13.1.0 through 7.13.1.80; LTS2025 8.3.1.0 through 8.3.1.40; and LTS2026 8.6.1.0 through 8.6.1.20.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·09:37 AM

Data Sourced

via MITRE·09:37 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to exploitation?

Any affected Dell PowerProtect Data Domain system reachable by a remote unauthenticated attacker is exposed. The vulnerability does not require credentials or user interaction.

What is the expected impact if exploitation succeeds?

Successful exploitation could cause a denial of service. The provided information does not indicate confidentiality or integrity impact.

Which release lines are affected?