{"id":"CVE-2026-86380","kind":"vulnerability","aliases":["CVE-2026-86380"],"related":[],"title":"Dell PowerProtect Data Domain: integer overflow lets privileged user bypass protection","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.","summary":"Several Dell PowerProtect Data Domain feature and LTS releases contain an integer overflow or wraparound flaw. A high-privileged remote attacker could exploit it to bypass a protection mechanism.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup","data-domain","dell","enterprise-storage","infrastructure","powerprotect"],"not_affected_if":["no-remote-admin-access","patched-release"],"how_to_check":"- Check the installed DD OS version on the Data Domain system (unknown exact command from sources)\n- Compare against affected ranges: `7.7.1.0` through `8.8`, `7.13.1.0` through `7.13.1.80`, `8.3.1.0` through `8.3.1.40`, `8.6.1.0` through `8.6.1.20`","fix":"- Move to a fixed Data Domain OS release from Dell's advisory (fixed version unknown from sources)\n- Restrict remote administrative access to trusted networks in the meantime","status":"open","published_at":"2026-10-28T10:17:09+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","triaged_at":"2026-10-28T10:34:26+00:00","updated_at":"2026-10-28T10:34:26+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T10:34:26Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed Data Domain OS release from Dell's advisory (fixed version unknown from sources)\n- Restrict remote administrative access to trusted networks in the meantime","reach":"network","title":"Dell PowerProtect Data Domain: integer overflow lets privileged user bypass protection","impact":"medium","summary":"Several Dell PowerProtect Data Domain feature and LTS releases contain an integer overflow or wraparound flaw. A high-privileged remote attacker could exploit it to bypass a protection mechanism.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup","enterprise-storage"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with high privileges bypasses a protection mechanism on the backup appliance.","analyst_note":"Find Dell's security advisory for the fixed DD OS versions and confirm the exact check command.","how_to_check":"- Check the installed DD OS version on the Data Domain system (unknown exact command from sources)\n- Compare against affected ranges: `7.7.1.0` through `8.8`, `7.13.1.0` through `7.13.1.80`, `8.3.1.0` through `8.3.1.40`, `8.6.1.0` through `8.6.1.20`","needs_analyst":true,"not_affected_if":["patched-release","no-remote-admin-access"],"who_is_affected":"Only Data Domain systems running the listed affected release ranges are exposed. The attacker needs high privileges and remote access, so systems with tightly limited administrator accounts and no remote management exposure carry lower practical risk. Systems on unaffected or patched releases can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000655,"input_tokens":3417,"output_tokens":627,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86380':14A,17A '7.13.1.0':71C '7.13.1.80':73C '7.7.1.0':65C '8.3.1.0':77C '8.3.1.40':79C '8.6.1.0':83C '8.6.1.20':85C '8.8':67C 'access':99C 'attack':49B,96C 'backup':18B 'bypass':10A,54B,109C 'contain':37B,86C 'could':50B,100C 'cve':12A,15A 'data':3A,20B,31B,60C 'data-domain':19B 'dell':1A,22B,29B,58C 'domain':4A,21B,32B,61C 'enterpris':24B 'enterprise-storag':23B 'exploit':51B,102C 'featur':33B,62C 'flaw':43B 'high':46B,94C 'high-privileg':45B 'infrastructur':26B 'integ':5A,39B,88C 'lead':105C 'let':7A 'lts':35B 'lts2024':68C 'lts2025':74C 'lts2026':80C 'mechan':57B,108C 'overflow':6A,40B,89C 'potenti':101C 'powerprotect':2A,27B,30B,59C 'privileg':8A,47B,95C 'protect':11A,56B,107C 'releas':36B,63C,69C,75C,81C 'remot':48B,98C 'sever':28B 'storag':25B 'user':9A 'version':64C,70C,76C,82C 'vulner':92C,104C 'wraparound':42B,91C","nicknames":[],"mitigations":[],"who_affected":"Only Data Domain systems running the listed affected release ranges are exposed. The attacker needs high privileges and remote access, so systems with tightly limited administrator accounts and no remote management exposure carry lower practical risk. Systems on unaffected or patched releases can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T10:17:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86380","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86380","severity":null,"published_at":"2026-10-28T10:17:09+00:00","modified_at":"2026-10-28T10:17:09+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","fetched_at":"2026-10-28T10:32:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}