CVE-2026-35154 is an improper privilege management vulnerability (CWE-269) in Dell PowerProtect Data Domain appliances. It affects Feature Release versions 7.7.1.0 through 8.6.0.0 and 8.7.0.0, LTS2025 versions 8.3.1.0 through 8.3.1.20, and LTS2024 versions 7.13.1.0 through 7.13.1.60. A high privileged attacker with local access could exploit this vulnerability to elevate privileges and gain unauthorized ability to perform delete operations. The CVSS v3.1 base score is 6.3 (AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H), reflecting medium severity with high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by Dell as of the data provided.

Successful exploitation allows a high privileged local attacker to elevate privileges further and perform unauthorized delete operations, potentially compromising data confidentiality, integrity, and availability on affected Dell PowerProtect Data Domain appliances. The impact is rated medium severity with high impact on core security properties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted administrators only and monitor for suspicious privilege escalation attempts. Follow Dell's official advisories for updates.