{"id":"CVE-2026-86378","kind":"vulnerability","aliases":["CVE-2026-86378"],"related":[],"title":"Dell PowerProtect Data Domain: stack overflow lets low-privilege remote users gain access","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","summary":"Several Dell PowerProtect Data Domain release lines contain a stack-based buffer overflow. A low-privileged attacker with remote access could exploit it to gain unauthorized access to the appliance.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","infrastructure","on-prem","powerprotect"],"not_affected_if":["no-remote-access","unaffected-release"],"how_to_check":"- Check the installed Data Domain OS version on the appliance (unknown exact command from sources)\n- Compare against affected ranges: 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), 8.6.1.0 through 8.6.1.20 (LTS2026)","fix":"- Move Data Domain OS to a fixed release from Dell's advisory (fixed version unknown from sources)\n- Restrict remote management access to the appliance to trusted networks until patched","status":"open","published_at":"2026-10-28T11:17:26+00:00","first_seen_at":"2026-10-28T11:32:33+00:00","triaged_at":"2026-10-28T11:33:19+00:00","updated_at":"2026-10-28T11:33:19+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T11:33:19Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a fixed release from Dell's advisory (fixed version unknown from sources)\n- Restrict remote management access to the appliance to trusted networks until patched","reach":"network","title":"Dell PowerProtect Data Domain: stack overflow lets low-privilege remote users gain access","impact":"high","summary":"Several Dell PowerProtect Data Domain release lines contain a stack-based buffer overflow. A low-privileged attacker with remote access could exploit it to gain unauthorized access to the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","on-prem"],"confidence":0.6,"needs_auth":"yes","worst_case":"Low-privileged remote attacker gains unauthorized access to the appliance","analyst_note":"Confirm fixed Data Domain OS versions and the exact check command in Dell's advisory for CVE-2026-86378; NVD text alone does not give them.","how_to_check":"- Check the installed Data Domain OS version on the appliance (unknown exact command from sources)\n- Compare against affected ranges: 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), 8.6.1.0 through 8.6.1.20 (LTS2026)","needs_analyst":true,"not_affected_if":["unaffected-release","no-remote-access"],"who_is_affected":"Operators running Dell PowerProtect Data Domain appliances on the affected release lines with remote access enabled. Sites that keep the management interface off untrusted networks and are on a non-affected release can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000662,"input_tokens":3413,"output_tokens":642,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-86378':17A,20A '7.13.1.0':76C '7.13.1.80':78C '7.7.1.0':70C '8.3.1.0':82C '8.3.1.40':84C '8.6.1.0':88C '8.6.1.20':90C '8.8':72C 'access':14A,52B,59B,105C,114C 'applianc':62B 'attack':49B,102C 'backup':21B 'base':42B,95C 'buffer':43B,96C 'contain':38B,91C 'could':53B,106C 'cve':15A,18A 'data':3A,23B,34B,65C 'data-domain':22B 'dell':1A,25B,32B,63C 'domain':4A,24B,35B,66C 'exploit':54B,108C 'featur':67C 'gain':13A,57B 'infrastructur':26B 'lead':111C 'let':7A 'line':37B 'low':9A,47B,100C 'low-privileg':8A,46B 'lts2024':73C 'lts2025':79C 'lts2026':85C 'on-prem':27B 'overflow':6A,44B,97C 'potenti':107C 'powerprotect':2A,30B,33B,64C 'prem':29B 'privileg':10A,48B,101C 'releas':36B,68C,74C,80C,86C 'remot':11A,51B,104C 'sever':31B 'stack':5A,41B,94C 'stack-bas':40B,93C 'unauthor':58B,113C 'user':12A 'version':69C,75C,81C,87C 'vulner':98C,110C","nicknames":[],"mitigations":[],"who_affected":"Operators running Dell PowerProtect Data Domain appliances on the affected release lines with remote access enabled. Sites that keep the management interface off untrusted networks and are on a non-affected release can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86378","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86378","severity":null,"published_at":"2026-10-28T11:17:26+00:00","modified_at":"2026-10-28T11:17:26+00:00","first_seen_at":"2026-10-28T11:32:33+00:00","fetched_at":"2026-10-28T11:32:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}