CVE-2026-86385

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper…

Risk score: 53/100
CVSS: 8.8 v3.1
Published: 28 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.8 high

References

https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Original description

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Last activity 28 Oct 2026. Patch Forecast updates every hour.