---
id: CVE-2026-86384
title: >-
  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8,
  LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions
  8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20,
  conta…
summary: >-
  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8,
  LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions
  8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20,
  conta…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-321
vendor: Dell
product: PowerProtect Data Domain
affected:
  - powerprotect_data_domain < 8.9.0.0 or later
  - powerprotect_data_domain < 7.13.1.90 or later
  - powerprotect_data_domain < 8.3.1.50 or later
  - powerprotect_data_domain < 8.6.1.30 or later
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-29T03:57:22.647682Z'
published: '2026-10-28'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T10:45:44.969Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-86384'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
tags:
  - cve.org
epss: 0.00472
epssPercentile: 0.40858
ingestedAt: '2026-10-28T10:08:49.605Z'
---

## Overview

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.

## Affected

- `powerprotect_data_domain < 8.9.0.0 or later`
- `powerprotect_data_domain < 7.13.1.90 or later`
- `powerprotect_data_domain < 8.3.1.50 or later`
- `powerprotect_data_domain < 8.6.1.30 or later`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.