CVE Catalog

CVE-2026-86384

CriticalCVSS 9.8
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to credential exposure.

Risk Assessment

Exposed credentials may be used to access the system with the privileges of the compromised user, creating a risk of unauthorized access to backup data and infrastructure.

Recommendation

Update Dell PowerProtect Data Domain to a patched version and consider rotating keys and credentials used in the system.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS