CVE-2026-46467 describes a CWE-532 vulnerability in Dell PowerProtect Data Domain products where sensitive information is improperly inserted into log files. This could allow a low privileged attacker with local access to gain unauthorized access to sensitive information through log file exposure. The affected versions include 7.7.1.0 through 8.7, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.8, reflecting high impact on confidentiality, low impact on integrity, and low impact on availability. No vendor advisory or patch information is currently available.

The vulnerability allows exposure of sensitive information through log files to a low privileged attacker with local access. This could lead to unauthorized disclosure of confidential data. The integrity impact is low and availability impact is low, indicating the primary concern is confidentiality compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for unauthorized access attempts. Avoid exposing log files to untrusted users.