CVE-2026-44268 is a vulnerability in Dell PowerProtect Data Domain products where incorrect permission assignments on critical resources exist. This misconfiguration could be exploited by a high privileged attacker with local access to gain unauthorized access to sensitive resources. The affected versions include 7.7.1.0 through 8.6, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70. The CVSS 3.1 base score is 4.4, reflecting a medium severity with local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high confidentiality impact. There is no vendor advisory or patch information available at this time.

A high privileged local attacker could exploit the incorrect permission assignment to gain unauthorized access to critical resources within the affected Dell PowerProtect Data Domain systems. The confidentiality of sensitive data could be compromised, but integrity and availability are not impacted according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted administrators only and monitor for unauthorized privilege escalations. Avoid granting unnecessary high privileges to users on affected systems.