{"id":"CVE-2026-86389","kind":"vulnerability","aliases":["CVE-2026-86389"],"related":[],"title":"Dell PowerProtect Data Domain: integer overflow lets privileged attacker run code","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.","summary":"Several Dell PowerProtect Data Domain release lines contain an integer overflow or wraparound bug. A high-privileged attacker with remote access could exploit it to execute code on the appliance.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["no-remote-admin-access","other-release-lines"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges: 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), 8.6.1.0 through 8.6.1.20 (LTS2026)\n- unknown for any other check, the sources do not say","fix":"- Move Data Domain OS to a release outside the affected ranges, per Dell's advisory\n- unknown for the exact fixed version numbers, the sources do not say","status":"open","published_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","triaged_at":"2026-10-28T10:34:27+00:00","updated_at":"2026-10-28T10:34:27+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T10:34:27Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a release outside the affected ranges, per Dell's advisory\n- unknown for the exact fixed version numbers, the sources do not say","reach":"network","title":"Dell PowerProtect Data Domain: integer overflow lets privileged attacker run code","impact":"high","summary":"Several Dell PowerProtect Data Domain release lines contain an integer overflow or wraparound bug. A high-privileged attacker with remote access could exploit it to execute code on the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with high privileges executes code on the backup appliance","analyst_note":"Check Dell's security advisory for the exact fixed versions and any workaround; the NVD entry alone gives no fix or check details.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges: 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), 8.6.1.0 through 8.6.1.20 (LTS2026)\n- unknown for any other check, the sources do not say","needs_analyst":true,"not_affected_if":["other-release-lines","no-remote-admin-access"],"who_is_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected OS release lines with remote management access reachable by administrators. Systems on other Data Domain releases outside the listed ranges are not named as affected. The attacker must already hold high privileges, so the exposure is mainly where many people or services can reach the management interface.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000667,"input_tokens":3411,"output_tokens":652,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86389':14A,17A '7.13.1.0':71C '7.13.1.80':73C '7.7.1.0':65C '8.3.1.0':77C '8.3.1.40':79C '8.6.1.0':83C '8.6.1.20':85C '8.8':67C 'access':48B,99C 'applianc':20B,57B 'attack':9A,45B,96C 'backup':19B 'backup-appli':18B 'bug':40B 'code':11A,54B,107C 'contain':34B,86C 'could':49B,100C 'cve':12A,15A 'data':3A,22B,30B,60C 'data-domain':21B 'dell':1A,24B,28B,58C 'domain':4A,23B,31B,61C 'execut':53B,108C 'exploit':50B,102C 'featur':62C 'high':43B,94C 'high-privileg':42B 'infrastructur':25B 'integ':5A,36B,88C 'lead':105C 'let':7A 'line':33B 'lts2024':68C 'lts2025':74C 'lts2026':80C 'overflow':6A,37B,89C 'potenti':101C 'powerprotect':2A,26B,29B,59C 'privileg':8A,44B,95C 'releas':32B,63C,69C,75C,81C 'remot':47B,98C 'run':10A 'sever':27B 'version':64C,70C,76C,82C 'vulner':92C,104C 'wraparound':39B,91C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain appliances on the affected OS release lines with remote management access reachable by administrators. Systems on other Data Domain releases outside the listed ranges are not named as affected. The attacker must already hold high privileges, so the exposure is mainly where many people or services can reach the management interface.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T10:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86389","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86389","severity":null,"published_at":"2026-10-28T10:17:10+00:00","modified_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","fetched_at":"2026-10-28T10:32:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}