CVE Catalog

CVE-2026-86385

HighCVSS 8.8
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain contains an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could exploit this vulnerability, leading to elevation of privileges.

Risk Assessment

Even a low-privileged user could escalate their privileges, increasing the risk of unauthorized access to administrative functions and data.

Recommendation

Update Dell PowerProtect Data Domain to a patched version and verify account privileges after privileged operations complete.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS