CVE-2026-90728Medium· 6.3▾ Sunlit

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score35/ 100 · Low

impact 34.7 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Oct 27, 2026

Updated

Oct 27, 2026

CVSS

6.3

Vendor

Dell

Product

PowerProtect Data Domain

CWE

CWE-269

Depth score

35 · Low

EPSS

—

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Dell CWE-269 #cve.org

Affected

powerprotect_data_domain < 8.9.0.0 or later
powerprotect_data_domain < 7.13.1.90 or later
powerprotect_data_domain < 8.3.1.50 or later
powerprotect_data_domain < 8.6.1.30 or later

Full technical detail▾

Overview

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

Affected

powerprotect_data_domain < 8.9.0.0 or later
powerprotect_data_domain < 7.13.1.90 or later
powerprotect_data_domain < 8.3.1.50 or later
powerprotect_data_domain < 8.6.1.30 or later

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org