{"id":"CVE-2026-86388","kind":"vulnerability","aliases":["CVE-2026-86388"],"related":[],"title":"Dell PowerProtect Data Domain: path traversal gives unauthenticated remote filesystem access","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.","summary":"Several Dell PowerProtect Data Domain release lines contain a path traversal flaw that lets a remote attacker escape a restricted directory. The sources say the attacker can reach filesystem contents without logging in.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["unreachable-from-network"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","triaged_at":"2026-10-28T10:34:34+00:00","updated_at":"2026-10-28T10:34:34+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T10:34:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Dell PowerProtect Data Domain: path traversal gives unauthenticated remote filesystem access","impact":"medium","summary":"Several Dell PowerProtect Data Domain release lines contain a path traversal flaw that lets a remote attacker escape a restricted directory. The sources say the attacker can reach filesystem contents without logging in.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"no","worst_case":"Remote attacker reads or writes files on the backup appliance without credentials","analyst_note":"Check Dell's security advisory for the fixed build numbers per release line and the affected service, since the NVD text gives no fix version or exposure check.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unreachable-from-network"],"who_is_affected":"Organizations running Dell PowerProtect Data Domain appliances on the affected Feature Release (7.7.1.0 through 8.8), LTS2024 (7.13.1.0 through 7.13.1.80), LTS2025 (8.3.1.0 through 8.3.1.40) or LTS2026 (8.6.1.0 through 8.6.1.20) builds. Appliances that are not reachable from the network are less exposed; the sources do not say which specific service or configuration is the entry point.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000611,"input_tokens":3438,"output_tokens":534,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86388':14A,17A '7.13.1.0':72C '7.13.1.80':74C '7.7.1.0':66C '8.3.1.0':78C '8.3.1.40':80C '8.6.1.0':84C '8.6.1.20':86C '8.8':68C 'access':11A,106C,115C 'applianc':20B 'attack':43B,52B,103C,117C 'backup':19B 'backup-appli':18B 'contain':34B,87C 'content':56B 'could':107C 'cve':12A,15A 'data':3A,22B,30B,61C 'data-domain':21B 'dell':1A,24B,28B,59C 'directori':47B,97C 'domain':4A,23B,31B,62C 'escap':44B 'exploit':109C 'featur':63C 'filesystem':10A,55B,114C 'flaw':38B 'give':7A 'improp':89C 'infrastructur':25B 'lead':112C 'let':40B 'limit':90C 'line':33B 'log':58B 'lts2024':69C 'lts2025':75C 'lts2026':81C 'path':5A,36B,98C 'pathnam':93C 'potenti':108C 'powerprotect':2A,26B,29B,60C 'reach':54B 'releas':32B,64C,70C,76C,82C 'remot':9A,42B,105C 'restrict':46B,96C 'say':50B 'sever':27B 'sourc':49B 'travers':6A,37B,99C 'unauthent':8A,102C 'version':65C,71C,77C,83C 'vulner':100C,111C 'without':57B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerProtect Data Domain appliances on the affected Feature Release (7.7.1.0 through 8.8), LTS2024 (7.13.1.0 through 7.13.1.80), LTS2025 (8.3.1.0 through 8.3.1.40) or LTS2026 (8.6.1.0 through 8.6.1.20) builds. Appliances that are not reachable from the network are less exposed; the sources do not say which specific service or configuration is the entry point.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T10:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86388","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86388","severity":null,"published_at":"2026-10-28T10:17:10+00:00","modified_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","fetched_at":"2026-10-28T10:32:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}