CVE-2026-46464 is an improper link resolution before file access vulnerability in Dell PowerProtect Data Domain affecting versions 7.7.1.0 through 8.7 and certain LTS releases (8.6.1.0 through 8.6.1.10, 8.3.1.0 through 8.3.1.30, and 7.13.1.0 through 7.13.1.70). The flaw involves the product incorrectly resolving symbolic links before accessing files, which could be exploited by a high privileged remote attacker to disclose sensitive information. The vulnerability does not impact integrity or availability, only confidentiality. The vendor has not published a patch or official remediation guidance as of the published date.

A high privileged attacker with remote access could exploit this vulnerability to disclose sensitive information due to improper link resolution before file access. The confidentiality impact is high, but there is no impact on integrity or availability. This could lead to unauthorized exposure of data stored or processed by the affected Dell PowerProtect Data Domain systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Dell's advisories for updates. Until a patch is available, restrict remote access to high privileged accounts and limit exposure of affected systems to untrusted networks.