Live › vulnerability › CVE-2026-86389
Go to dashboardSeveral Dell PowerProtect Data Domain release lines contain an integer overflow or wraparound bug. A high-privileged attacker with remote access could exploit it to execute code on the appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 10:32 UTC. All times on this page are UTC.
Teams running Dell PowerProtect Data Domain appliances on the affected OS release lines with remote management access reachable by administrators. Systems on other Data Domain releases outside the listed ranges are not named as affected. The attacker must already hold high privileges, so the exposure is mainly where many people or services can reach the management interface.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-86389")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.