Medium
6.8
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release...
CVE-2026-86383
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Dell | PowerProtect Data Domain |
< 8.9.0.0 or later < 8.3.1.50 or later < 8.6.1.30 or later |
8.9.0.0 or later 8.3.1.50 or later 8.6.1.30 or later |
Original description The description as published by the source.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web security_alert@emc.com
- web nvd.nist.gov
- web github.com