CVE-2026-86400

{
  "etk_id": "ETK-2026-2846",
  "cve_id": "CVE-2026-86400",
  "display_id": "CVE-2026-86400",
  "ghsa_id": "GHSA-8crc-59h3-399f",
  "euvd_id": "EUVD-2026-111829",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper authentication in Dell PowerProtect Data Domain",
  "summary": "Dell PowerProtect Data Domain Feature Release 7.7.1.0 through 8.8 and specified LTS2024, LTS2025, and LTS2026 releases are affected. An unauthenticated attacker able to reach an affected system remotely may execute commands with root privileges.",
  "mitigation": "Upgrade Feature Release deployments to 8.9.0.0 or later. Upgrade LTS2024 to 7.13.1.90 or later, LTS2025 to 8.3.1.50 or later, and LTS2026 to 8.6.1.30 or later.",
  "vendor": "Dell",
  "product": "PowerProtect Data Domain",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < 8.9.0.0 or later",
        ">= 0, < 7.13.1.90 or later",
        ">= 0, < 8.3.1.50 or later",
        ">= 0, < 8.6.1.30 or later"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "8.9.0.0 or later",
        "7.13.1.90 or later",
        "8.3.1.50 or later",
        "8.6.1.30 or later"
      ],
      "package_name": "PowerProtect Data Domain",
      "purl": null
    }
  ],
  "cwes": [
    287
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 8.94107625,
  "t0_at": "2026-10-28T08:50:11.332000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-28T08:50:11.332000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-28T08:50:11.332000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86400"
    }
  }
}