Dell

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Dell product.

RSS Feeds for Dell security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Dell products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Dell Sorted by Most Security Vulnerabilities since 2018

Dell Secure Connect Gateway167 vulnerabilities

Dell Powerscale Onefs103 vulnerabilities

Dell Wyse Management Suite72 vulnerabilities

Dell Unity Operating Environment45 vulnerabilities

Dell Data Domain Operating System38 vulnerabilities

Dell Openmanage Enterprise37 vulnerabilities

Dell Smartfabric Os1036 vulnerabilities

Dell Alienware Command Center30 vulnerabilities

Dell Unity30 vulnerabilities

Dell Bsafe Micro Edition Suite28 vulnerabilities

Dell Powerprotect Data Manager28 vulnerabilities

Dell Supportassist For Home Pcs26 vulnerabilities

Dell Command Update23 vulnerabilities

Dell Objectscale23 vulnerabilities

Dell Unisphere For Powermax20 vulnerabilities

Dell Bsafe Crypto C Micro Edition19 vulnerabilities

Dell Bsafe Ssl J19 vulnerabilities

Dell Supportassist For Business Pcs19 vulnerabilities

Dell Container Storage Modules18 vulnerabilities

Dell Unisphere Powermax Virtual Appliance18 vulnerabilities

Dell Cloudlink16 vulnerabilities

Dell Solutions Enabler Virtual Appliance15 vulnerabilities

Dell Recoverpoint Virtual Machines14 vulnerabilities

Dell Elastic Cloud Storage13 vulnerabilities

Dell Supportassist13 vulnerabilities

Dell Policy Manager Secure Connect Gateway12 vulnerabilities

Dell Insightiq12 vulnerabilities

Dell Powerprotect Data Domain Management Center11 vulnerabilities

Dell Networker11 vulnerabilities

Dell Bsafe Crypto J10 vulnerabilities

Dell Unity Xt Operating Environment10 vulnerabilities

Dell Smartfabric Storage Software10 vulnerabilities

Dell Unityvsa Operating Environment10 vulnerabilities

Dell Networking Os109 vulnerabilities

Dell Appsync8 vulnerabilities

Dell Update Package Framework8 vulnerabilities

Dell Controlvault38 vulnerabilities

Dell Digital Delivery8 vulnerabilities

Dell Repository Manager8 vulnerabilities

Dell Alienware Update7 vulnerabilities

Dell Avamar Server7 vulnerabilities

Dell Storage Manager7 vulnerabilities

Dell Openmanage Server Administrator7 vulnerabilities

Dell Encryption7 vulnerabilities

Dell Enterprise Sonic Distribution7 vulnerabilities

Dell System Update7 vulnerabilities

Dell Idrac97 vulnerabilities

Dell Update6 vulnerabilities

Dell Display Manager6 vulnerabilities

Dell Thinos6 vulnerabilities

Dell Os Recovery Tool6 vulnerabilities

Dell Emc Appsync6 vulnerabilities

Dell Emc Idrac Service Module6 vulnerabilities

Dell Supportassist Os Recovery6 vulnerabilities

Dell Peripheral Manager6 vulnerabilities

Dell Endpoint Security Suite Enterprise6 vulnerabilities

Dell Command Monitor5 vulnerabilities

Dell Data Lakehouse5 vulnerabilities

Dell Enterprise Sonic Os5 vulnerabilities

Dell Power Manager5 vulnerabilities

Dell Unisphere 3605 vulnerabilities

Dell Powerstoreos5 vulnerabilities

Dell Command Intel Vpro Out Band4 vulnerabilities

Dell Common Event Enabler4 vulnerabilities

Dell Powerprotect Cyber Recovery4 vulnerabilities

Known Exploited Dell Vulnerabilities

The following Dell vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability	Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence. CVE-2026-22769 Exploit Probability: 13.3%	February 18, 2026
Dell dbutil Driver Insufficient Access Control Vulnerability	Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service, or information disclosure. CVE-2021-21551 Exploit Probability: 79.6%	March 31, 2022

The vulnerability CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability is in the top 1% of the currently known exploitable vulnerabilities. The vulnerability CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability is in the top 5% of the currently known exploitable vulnerabilities.

By the Year

In 2026 there have been 620 vulnerabilities in Dell with an average score of 6.6 out of ten. Last year, in 2025 Dell had 205 security vulnerabilities published. That is, 415 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.18

Year	Vulnerabilities	Average Score
2026	620	6.58
2025	205	6.76
2024	219	7.07
2023	168	6.96
2022	131	7.20
2021	142	6.95
2020	35	7.45
2019	54	7.36
2018	57	7.21

It may take a day or so for new Dell vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Dell Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-82160	Nov 03, 2026	Dell Wyse MS <2609.0.0.155 XSS Vulnerability Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.	Wyse Management Suite
CVE-2026-82161	Nov 03, 2026	Dell Wyse Management Suite 2609.0.0.155 XSS Vulnerability Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.	Wyse Management Suite
CVE-2026-82158	Nov 03, 2026	Dell Wyse Management Suite XSS in pre-2609.0.0.155 Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.	Wyse Management Suite
CVE-2026-82159	Nov 03, 2026	Dell Wyse Mgmt Suite <2609.0.0.155 XSS via Improper Input Nombr. Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.	Wyse Management Suite
CVE-2026-82155	Nov 03, 2026	Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.	Os Recovery Tool
CVE-2026-82154	Nov 03, 2026	Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.	Os Recovery Tool
CVE-2026-91901	Nov 02, 2026	Improper Auth in Dell Alienware AWCC URL Scheme Handler <6.14.54.0 CSRF Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery.	Alienware Command Center
CVE-2026-91896	Nov 02, 2026	Alienware Command Center Auth Bypass via Spoofing before 6.14.54.0 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering, Denial of Service and Spoofing of Application Notifications.	Alienware Command Center
CVE-2026-86365	Nov 02, 2026	Dell AWCC <=6.14.54.0 Improper Input Validation leads to DoS Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service.	Alienware Command Center
CVE-2026-91900	Nov 02, 2026	Dell Alienware Command Center <=6.14.20.0 - Improper Auth in Custom URL Scheme Handler Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.	Alienware Command Center
CVE-2026-91899	Nov 02, 2026	Dell AWCC <6.14.54.0 Improper Verification of Crypto Signature (EoP) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution.	Alienware Command Center
CVE-2026-91897	Nov 02, 2026	Dell AWCC Improper Cert Validation (AWCC <6.14.54.0) ARC Execution Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service.	Alienware Command Center
CVE-2026-91894	Nov 02, 2026	Dell Alienware Command Center <6.14.54.0 LPE (Local Privilege Escalation) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service.	Alienware Command Center
CVE-2026-91895	Nov 02, 2026	Dell AWCC <=6.14.54.0 - Incorrect Default Permissions (Low Privilege Local) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.	Alienware Command Center
CVE-2026-91898	Nov 02, 2026	Alienware Command Center <6.14.54 Improper Sign Verify APE Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.	Alienware Command Center
CVE-2026-91893	Nov 02, 2026	Dell AWCC <6.14.54.0 Improper Privilege Management EoP Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.	Alienware Command Center
CVE-2026-91903	Nov 02, 2026	Dell OpenManage Ent <4.8.0 Path Traversal for FS Access Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Filesystem access for attacker.	Openmanage Enterprise
CVE-2026-91904	Nov 02, 2026	Dell OpenManage Enterprise <4.8.0: Incorrect Permission Assignment Vulnerability Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.	Openmanage Enterprise
CVE-2026-91905	Nov 02, 2026	OpenManage Enterprise (pre-4.8) Improper Verification of Crypto Signature Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.	Openmanage Enterprise
CVE-2026-91906	Nov 02, 2026	Dell OpenManage Enterprise <4.8.0 Incorrect Permission Assignment Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.	Openmanage Enterprise
CVE-2026-94349	Nov 02, 2026	Dell OpenManage Enterprise OS Command Injection <4.8.0 (CVE-2026-94349) Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.	Openmanage Enterprise
CVE-2026-91907	Nov 02, 2026	Dell OM Enterprise XSS in versions <4.8.0 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering	Openmanage Enterprise
CVE-2026-91908	Nov 02, 2026	OpenManage Enterprise Improper Cryptographic Signature Verification (CVE-2026-91908) - before 4.8.0 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.	Openmanage Enterprise
CVE-2026-91909	Nov 02, 2026	Dell OpenManage Enterprise <4.8.0 Arg Injection via Argument Delimiters Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.	Openmanage Enterprise
CVE-2026-91910	Nov 02, 2026	Dell OpenManage Enterprise <4.8.0 Path Traversal Info Exposure Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information exposure.	Openmanage Enterprise
CVE-2026-91911	Nov 02, 2026	Dell OM Enterprise <4.8.0 Path Traversal Vulnerability Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Filesystem access for attacker.	Openmanage Enterprise
CVE-2026-91912	Oct 30, 2026	Dell OpenManage Enterprise <4.8.0 Hard-Coded Crypto Key - Info Disclosure Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.	Openmanage Enterprise
CVE-2026-91913	Oct 30, 2026	Dell OpenManage Enterprise <=4.8.0 OS Command Injection Vulnerability Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.	Openmanage Enterprise
CVE-2026-91914	Oct 30, 2026	Dell OpenManage Enterprise <4.8.0 Auth Bypass Spoofing Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.	Openmanage Enterprise
CVE-2026-91915	Oct 30, 2026	Dell OpenManage Enterprise <4.8.0: Imp. Neutralization Special Elements (Injection) Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.	Openmanage Enterprise
CVE-2026-91917	Oct 30, 2026	Dell OpenManage Enterprise <4.8.0: Improper Input Validation Enables Code Exec Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.	Openmanage Enterprise
CVE-2026-81472	Oct 28, 2026	Dell iDRAC Service Module (iSM) <6.1.1.0: Code Injection Priv Escalation Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-103799	Oct 28, 2026	Dell PowerProtect Data Domain Management Center Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.	Powerprotect Data Domain Management Center
CVE-2026-86377	Oct 28, 2026	Dell Powerprotect DataDom OOB Write DoS (v7.7.18.8, 7.13.17.13.1.80) Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-86378	Oct 28, 2026	Stack-Based Buffer Overflow in Dell PowerProtect Data Domain before 8.6.1.21 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
CVE-2026-86379	Oct 28, 2026	OS Command Injection in Dell PowerProtect Data Domain MGMT Center 7.78.8 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.	Powerprotect Data Domain Management Center
CVE-2026-86380	Oct 28, 2026	Dell PowerProtect Data Domain Integer Overflow (7.7.1.0-8.8, LTS2024-2026) Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
CVE-2026-86383	Oct 28, 2026	PowerProtect Data Domain <8.9: Path Traversal via Improper Path Limit Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-86384	Oct 28, 2026	Dell PowerProtect Data Domain Hard-Coded Crypto Key Leak (7.7.18.8, LTS) Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.
CVE-2026-86385	Oct 28, 2026	Dell PowerProtect Data Domain 7.7.1.0-8.8 Improper Check for Dropped Privileges Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-86386	Oct 28, 2026	SQL Injection in PowerProtect DDM 7.7.18.8 LTS20242026 \| Low Priv \| InfoLeak Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.	Powerprotect Data Domain Management Center
CVE-2026-86388	Oct 28, 2026	Dell PowerProtect Data Domain Path Traversal 7.7.1.0-8.8 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVE-2026-92665	Oct 28, 2026	Unbounded Resource Allocation in Dell PowerProtect Data Domain < 9 (DoS) Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-86389	Oct 28, 2026	Dell PowerProtect Data Domain 7.7-8.6: Int Ovf Remote CEx Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
CVE-2026-86390	Oct 28, 2026	Dell PowerProtect Data Domain 7.7.1.0-8.8 LTS2024-2026 Missing Auth Remote Access Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-86391	Oct 28, 2026	Dell PowerProtect Data Domain Mgmt Center Auth Bypass Spoofing (7.7.1.0-8.8) Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.	Powerprotect Data Domain Management Center
CVE-2026-86392	Oct 28, 2026	Dell PowerProtect Data Domain 7.7-8.6 Heap Buffer Overflow DoS Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-86393	Oct 28, 2026	Dell PowerProtect Data Domain EoP via Improper Privilege Mgt 7.7-8.6 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-86394	Oct 28, 2026	Dell PowerProtect Data Domain OS Command Injection 7.7.1.0-8.8 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2026-86395	Oct 28, 2026	OS Command Injection in Dell PowerProtect DP Ve 7.7.1.08.8, LTS20242026 Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.