CVE-2026-86384
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Oct 28, 2026
CISA due date
—
The record
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61737 ng-antd-admin is an Angular and NestJS administration system template. CWE-321
- CVE-2026-91912 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded… CWE-321
- CVE-2026-119597 OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that… CWE-321
- CVE-2025-62841 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3… CWE-321
- CVE-2025-62839 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3… CWE-321
- CVE-2026-102812 A hard-coded cryptographic key vulnerability exists in the user-configuration backup… CWE-321
- CVE-2026-117564 nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows… CWE-321
- CVE-2026-111460 A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. CWE-321