CVE Catalog

CVE-2026-86383

MediumCVSS 6.8
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.

Risk Assessment

A highly privileged attacker could access files outside the intended directory, potentially leading to exposure of sensitive data. Exploitation requires remote access and elevated privileges.

Recommendation

Update Dell PowerProtect Data Domain to a patched version and limit the number of highly privileged accounts. Review access logs for reads of unusual paths.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS