Vulnerability Details CVE-2026-86378
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 31.0%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-86378
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.0
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.10
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.20
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.25
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.30
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.40
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.50
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.60
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.70
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.80
-
cpe:2.3:o:dell:data_domain_operating_system:7.13.1.85
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.0
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.10
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.20
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.30
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.40
-
cpe:2.3:o:dell:data_domain_operating_system:8.3.1.45
-
cpe:2.3:o:dell:data_domain_operating_system:8.6.1.0
-
cpe:2.3:o:dell:data_domain_operating_system:8.6.1.10
-
cpe:2.3:o:dell:data_domain_operating_system:8.6.1.20
-
cpe:2.3:o:dell:data_domain_operating_system:8.6.1.25