{"id":"CVE-2026-86392","kind":"vulnerability","aliases":["CVE-2026-86392"],"related":[],"title":"Dell PowerProtect Data Domain: heap overflow lets a privileged remote user crash service","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.","summary":"Several Dell PowerProtect Data Domain release lines contain a heap-based buffer overflow. A high-privileged attacker with remote access can trigger it to cause a denial of service.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["no-remote-admin-access","version-outside-listed-ranges"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (7.7.1.0 through 8.8 feature releases, 7.13.1.0 to 7.13.1.80, 8.3.1.0 to 8.3.1.40, 8.6.1.0 to 8.6.1.20)\n- unknown for any other check, as the sources do not say","fix":"- Upgrade Dell PowerProtect Data Domain to a fixed release listed in the Dell security advisory for your release line\n- unknown for the exact fixed version numbers, as the sources do not say","status":"open","published_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","triaged_at":"2026-10-28T10:34:35+00:00","updated_at":"2026-10-28T10:34:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T10:34:35Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Dell PowerProtect Data Domain to a fixed release listed in the Dell security advisory for your release line\n- unknown for the exact fixed version numbers, as the sources do not say","reach":"network","title":"Dell PowerProtect Data Domain: heap overflow lets a privileged remote user crash service","impact":"low","summary":"Several Dell PowerProtect Data Domain release lines contain a heap-based buffer overflow. A high-privileged attacker with remote access can trigger it to cause a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker crashes the Data Domain service, causing denial of service","analyst_note":"Confirm the fixed versions and any remote-access preconditions in the Dell advisory for CVE-2026-86392; the sources give only the NVD description.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (7.7.1.0 through 8.8 feature releases, 7.13.1.0 to 7.13.1.80, 8.3.1.0 to 8.3.1.40, 8.6.1.0 to 8.6.1.20)\n- unknown for any other check, as the sources do not say","needs_analyst":true,"not_affected_if":["version-outside-listed-ranges","no-remote-admin-access"],"who_is_affected":"Operators of Dell PowerProtect Data Domain appliances running the listed feature and LTS release ranges. Exploitation requires a high-privileged account with remote access, so systems with tight admin access are at lower risk. Sites on versions outside the listed ranges can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000665,"input_tokens":3413,"output_tokens":647,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-86392':16A,19A '7.13.1.0':73C '7.13.1.80':75C '7.7.1.0':67C '8.3.1.0':79C '8.3.1.40':81C '8.6.1.0':85C '8.6.1.20':87C '8.8':69C 'access':50B,102C 'applianc':22B 'attack':47B,99C 'backup':21B 'backup-appli':20B 'base':40B,92C 'buffer':41B,93C 'caus':55B 'contain':36B,88C 'could':103C 'crash':12A 'cve':14A,17A 'data':3A,24B,32B,62C 'data-domain':23B 'dell':1A,26B,30B,60C 'denial':57B,110C 'domain':4A,25B,33B,63C 'exploit':105C 'featur':64C 'heap':5A,39B,91C 'heap-bas':38B,90C 'high':45B,97C 'high-privileg':44B 'infrastructur':27B 'lead':108C 'let':7A 'line':35B 'lts2024':70C 'lts2025':76C 'lts2026':82C 'overflow':6A,42B,94C 'potenti':104C 'powerprotect':2A,28B,31B,61C 'privileg':9A,46B,98C 'releas':34B,65C,71C,77C,83C 'remot':10A,49B,101C 'servic':13A,59B,112C 'sever':29B 'trigger':52B 'user':11A 'version':66C,72C,78C,84C 'vulner':95C,107C","nicknames":[],"mitigations":[],"who_affected":"Operators of Dell PowerProtect Data Domain appliances running the listed feature and LTS release ranges. Exploitation requires a high-privileged account with remote access, so systems with tight admin access are at lower risk. Sites on versions outside the listed ranges can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T10:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86392","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86392","severity":null,"published_at":"2026-10-28T10:17:10+00:00","modified_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","fetched_at":"2026-10-28T10:32:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}