CVE-2026-86384
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 28 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Dell PowerProtect Data Domain has a hard-coded cryptographic key vulnerability, allowing an unauthenticated attacker to potentially exploit this vulnerability, leading to credential exposure.
- Affected
- {'products': ['Dell PowerProtect Data Domain'], 'packages': [], 'versions': ['7.7.1.0 through 8.8', '7.13.1.0 through 7.13.1.80', '8.3.1.0 through 8.3.1.40', '8.6.1.0 through 8.6.1.20']}
- Fix
- Check the linked advisory for the concrete fix.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.
Last activity 28 Oct 2026. Patch Forecast updates every hour.