{"id":"CVE-2026-86393","kind":"vulnerability","aliases":["CVE-2026-86393"],"related":[],"title":"Dell PowerProtect Data Domain: privileged user can escalate privileges remotely","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","summary":"Several Dell PowerProtect Data Domain release lines contain an improper privilege management flaw. A high-privileged remote attacker can potentially escalate their privileges on the appliance.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["version-outside-range"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges listed in the advisory (Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20).\n- Review which accounts hold high-privilege roles on the appliance.","fix":"- Move Data Domain OS to a release fixed by Dell's advisory for the affected line; the sources do not name the fixed version, so unknown.","status":"open","published_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","triaged_at":"2026-10-28T10:34:25+00:00","updated_at":"2026-10-28T10:34:25+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T10:34:25Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a release fixed by Dell's advisory for the affected line; the sources do not name the fixed version, so unknown.","reach":"network","title":"Dell PowerProtect Data Domain: privileged user can escalate privileges remotely","impact":"high","summary":"Several Dell PowerProtect Data Domain release lines contain an improper privilege management flaw. A high-privileged remote attacker can potentially escalate their privileges on the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"high-privileged user escalates to higher privilege on the appliance","analyst_note":"Find Dell's security advisory for the fixed Data Domain OS versions and the exact privilege boundary crossed.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges listed in the advisory (Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20).\n- Review which accounts hold high-privilege roles on the appliance.","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Teams running Dell PowerProtect Data Domain appliances on the listed release ranges. The attacker needs high privileges and remote access, so exposure is mainly a concern where many admin-level accounts exist or the management interface is reachable from broad networks. Sites on other versions are outside the listed ranges.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000654,"input_tokens":3411,"output_tokens":626,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-86393':13A,16A '7.13.1.0':66C '7.13.1.80':68C '7.7.1.0':60C '8.3.1.0':72C '8.3.1.40':74C '8.6.1.0':78C '8.6.1.20':80C '8.8':62C 'access':93C 'applianc':19B,52B 'attack':44B,90C 'backup':18B 'backup-appli':17B 'contain':33B,81C 'could':94C 'cve':11A,14A 'data':3A,21B,29B,55C 'data-domain':20B 'dell':1A,23B,27B,53C 'domain':4A,22B,30B,56C 'elev':101C 'escal':8A,47B 'exploit':96C 'featur':57C 'flaw':38B 'high':41B,88C 'high-privileg':40B 'improp':35B,83C 'infrastructur':24B 'lead':99C 'line':32B 'lts2024':63C 'lts2025':69C 'lts2026':75C 'manag':37B,85C 'potenti':46B,95C 'powerprotect':2A,25B,28B,54C 'privileg':5A,9A,36B,42B,49B,84C,89C,103C 'releas':31B,58C,64C,70C,76C 'remot':10A,43B,92C 'sever':26B 'user':6A 'version':59C,65C,71C,77C 'vulner':86C,98C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain appliances on the listed release ranges. The attacker needs high privileges and remote access, so exposure is mainly a concern where many admin-level accounts exist or the management interface is reachable from broad networks. Sites on other versions are outside the listed ranges.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T10:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86393","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86393","severity":null,"published_at":"2026-10-28T10:17:10+00:00","modified_at":"2026-10-28T10:17:10+00:00","first_seen_at":"2026-10-28T10:32:15+00:00","fetched_at":"2026-10-28T10:32:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}