中 4.3

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8,...

CVE-2026-86386 SecPulse初出 10月28日 18:44

影響パッケージ

種類	パッケージ	影響を受ける版	直った版
Dell	PowerProtect Data Domain Management Center	8.9.0.0 or later 未満 7.13.1.90 or later 未満 8.3.1.50 or later 未満 8.6.1.30 or later 未満	8.9.0.0 or later 7.13.1.90 or later 8.3.1.50 or later 8.6.1.30 or later

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

影響パッケージ

参照URL