Threats affecting pkg:rpm/dell/powerprotect-data-domain

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 contain a vulnerability involving improper checking for dropped privileges. This flaw could allow a low privileged attacker with remote access to elevate their privileges on the affected system. The vulnerability is tracked as CVE-2026-86385 and has a high severity rating with a CVSS score of 8.8. A fix is available starting from version 8.9.0.0.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including specific LTS releases, contain a Missing Authorization vulnerability (CWE-862). This flaw allows a low privileged attacker with remote access to potentially gain unauthorized access. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily affecting confidentiality. Fixed versions are available starting from 8.9.0.0 and certain later LTS releases.