CVE-2026-86385
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Oct 28, 2026
CISA due date
—
The record
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80047 A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote… CWE-273
- CVE-2026-61897 An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops… CWE-273
- CVE-2026-58086 As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied… CWE-273
- CVE-2026-49421 The kernel function that implements unlinkat(2) and funlinkat(2) validated the… CWE-273
- CVE-2026-60085 PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the… CWE-273
- CVE-2026-0099 In onNullBinding of HostEmulationManager.java, there is a possible way to launch an… CWE-273
- CVE-2026-44073 Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of… CWE-273
- CVE-2026-32107 xrdp is an open source RDP server. CWE-273