CVE-2026-86397

Summary

The flaw is an improper authentication vulnerability in Dell PowerProtect Data Domain that allows unauthenticated remote attackers to create privileged accounts, leading to full system compromise.

Exploitability

Exploitation requires no authentication or user interaction and can be performed remotely by any attacker with network access to the vulnerable service.

Blast radius

Successful exploitation grants attackers complete control over the affected system, enabling data exfiltration, destruction, or lateral movement within the environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Dell PowerProtect Data Domain Feature Release 8.9 or later, LTS2024 7.13.1.81 or later, LTS2025 8.3.1.41 or later, or LTS2026 8.6.1.21 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.