CVE-2026-86384
Dell PowerProtect Data Domain
CRITICAL 9.8
En bref
- Source
- CVE.org
- EPSS
- EPSS 0.50 % · centile 43 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- dell
Description
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.
Faiblesses (CWE)
- CWE-321 — Utilisation d'une clé cryptographique codée en dur
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | dell |
Références européennes
- ENISA EUVD · EUVD-2026-111974
- GCVE · GCVE-0-2026-86384
Produits affectés
| Produit | Versions |
|---|---|
| Dell · PowerProtect Data Domain | affected 0 < 8.9.0.0 or later ; affected 0 < 7.13.1.90 or later ; affected 0 < 8.3.1.50 or later ; affected 0 < 8.6.1.30 or later |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |