{"id":"CVE-2026-86401","kind":"vulnerability","aliases":["CVE-2026-86401"],"related":[],"title":"Dell PowerProtect Data Domain Management Center: SQL injection exposes stored information","description":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.","summary":"Several Dell PowerProtect Data Domain Management Center release lines contain an SQL injection flaw. A high-privileged attacker with remote access could read information the database holds.","severity":"low","cvss":2.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["data-domain","dell","infrastructure","powerprotect","self-hosted"],"not_affected_if":["no-privileged-remote-access","unaffected-version"],"how_to_check":"- Check the installed Management Center version in the product UI or CLI; the sources do not give a command.\n- Compare it against the affected ranges: 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20.","fix":"- Upgrade Dell PowerProtect Data Domain Management Center to a fixed release for your line; the sources do not name the fixed version numbers.","status":"open","published_at":"2026-10-28T09:17:08+00:00","first_seen_at":"2026-10-28T09:32:03+00:00","triaged_at":"2026-10-28T09:34:12+00:00","updated_at":"2026-10-28T09:34:12+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T09:34:12Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Dell PowerProtect Data Domain Management Center to a fixed release for your line; the sources do not name the fixed version numbers.","reach":"network","title":"Dell PowerProtect Data Domain Management Center: SQL injection exposes stored information","impact":"low","summary":"Several Dell PowerProtect Data Domain Management Center release lines contain an SQL injection flaw. A high-privileged attacker with remote access could read information the database holds.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"high-privileged remote attacker reads database information","analyst_note":"Confirm fixed versions and the exact information exposed from the Dell security advisory for CVE-2026-86401.","how_to_check":"- Check the installed Management Center version in the product UI or CLI; the sources do not give a command.\n- Compare it against the affected ranges: 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20.","needs_analyst":true,"not_affected_if":["unaffected-version","no-privileged-remote-access"],"who_is_affected":"Only deployments of the listed Dell PowerProtect Data Domain Management Center release lines are affected. Exploitation needs a high-privileged account with remote access, so exposure depends on who holds those accounts. Teams not running these versions can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000634,"input_tokens":3428,"output_tokens":583,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86401':14A,17A '7.13.1.0':70C '7.13.1.80':72C '7.7.1.0':64C '8.3.1.0':76C '8.3.1.40':78C '8.6.1.0':82C '8.6.1.20':84C '8.8':66C 'access':48B,106C 'attack':45B,103C 'center':6A,33B,60C 'command':96C 'contain':36B,85C 'could':49B,107C 'cve':12A,15A 'data':3A,19B,30B,57C 'data-domain':18B 'databas':53B 'dell':1A,21B,28B,55C 'domain':4A,20B,31B,58C 'element':91C 'exploit':109C 'expos':9A 'exposur':115C 'featur':61C 'flaw':40B 'high':43B,101C 'high-privileg':42B 'hold':54B 'host':26B 'improp':87C 'inform':11A,51B,114C 'infrastructur':22B 'inject':8A,39B,98C 'lead':112C 'line':35B 'lts2024':67C 'lts2025':73C 'lts2026':79C 'manag':5A,32B,59C 'neutral':88C 'potenti':108C 'powerprotect':2A,23B,29B,56C 'privileg':44B,102C 'read':50B 'releas':34B,62C,68C,74C,80C 'remot':47B,105C 'self':25B 'self-host':24B 'sever':27B 'special':90C 'sql':7A,38B,95C,97C 'store':10A 'use':92C 'version':63C,69C,75C,81C 'vulner':99C,111C","nicknames":[],"mitigations":[],"who_affected":"Only deployments of the listed Dell PowerProtect Data Domain Management Center release lines are affected. Exploitation needs a high-privileged account with remote access, so exposure depends on who holds those accounts. Teams not running these versions can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T09:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86401","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86401","severity":null,"published_at":"2026-10-28T09:17:08+00:00","modified_at":"2026-10-28T09:17:08+00:00","first_seen_at":"2026-10-28T09:32:03+00:00","fetched_at":"2026-10-28T09:32:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}