{"id":"CVE-2026-86397","published":"2026-10-28T09:17:07.663","lastModified":"2026-10-28T09:17:07.663","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to privileged account creation. This is a critical severity vulnerability as it allows an attacker to take complete control of the system. Dell recommends customers to upgrade at the earliest opportunity.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an improper authentication vulnerability in Dell PowerProtect Data Domain that allows unauthenticated remote attackers to create privileged accounts, leading to full system compromise.","exploitability":"Exploitation requires no authentication or user interaction and can be performed remotely by any attacker with network access to the vulnerable service.","blast_radius":"Successful exploitation grants attackers complete control over the affected system, enabling data exfiltration, destruction, or lateral movement within the environment.","remediation":"Upgrade to Dell PowerProtect Data Domain Feature Release 8.9 or later, LTS2024 7.13.1.81 or later, LTS2025 8.3.1.41 or later, or LTS2026 8.6.1.21 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","privilege-escalation","critical","ddos","remotely-exploitable"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:02:31.614Z"}}