Live › vulnerability › CVE-2026-86385
Go to dashboardDell PowerProtect Data Domain feature releases 7.7.1.0 through 8.8 fail to check whether privileges were properly dropped. A low-privileged attacker with remote access could exploit this to gain elevated privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 10:32 UTC. All times on this page are UTC.
Organizations running Dell PowerProtect Data Domain feature releases from 7.7.1.0 through 8.8 with remote access enabled for low-privileged accounts. Systems on other releases, or without remotely reachable low-privileged accounts, are less exposed. Sources do not say which specific features or configurations are required.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-86385")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.