CVEvulnerability

CVE-2026-86391

6.4 MEDIUM Published 2026-10-28 Modified 2026-10-29 Official page ↗
Status
Undergoing Analysis
Published
2026-10-28
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Weaknesses
CWE-290

Description

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References