Live › vulnerability › CVE-2026-86383
Go to dashboardSeveral Dell PowerProtect Data Domain releases contain a path traversal flaw that lets a file path escape its intended directory. A high-privileged remote attacker could use it to read information they should not see.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 10:32 UTC. All times on this page are UTC.
Owners of Dell PowerProtect Data Domain appliances on the listed DD OS release ranges. The attacker needs high privileges and remote access, so the exposure depends on who holds admin-level accounts and whether management access is reachable from untrusted networks. Sites on other releases, or not running Data Domain, can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-86383")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.