Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release…
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Dell Technologies
- Product
- PowerProtect Data Domain
- CVSS v3.1
- 6.8 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- Weakness
- CWE-22
- Exposure class
- Storage / NAS
- NVD status
- Received
Why it ranks 10 (Routine)
- CVSS v3.1 6.8 medium
- Product class: storage / NAS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-86383 on this site · NVD · CVE.org · Vulnpedia