Dell PowerProtect Data Domain Uninitialized Resource Vulnerability (<=8.7)
CVE-2026-56085 Published on July 3, 2026
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Vulnerability Analysis
CVE-2026-56085 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
Use of Uninitialized Resource
The software uses or accesses a resource that has not been initialized. When a resource has not been properly initialized, the software may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the software.
Affected Versions
Dell PowerProtect Data Domain:- Before 8.8.0.0 or later is affected.
- Before 8.6.1.20 or later is affected.
- Before 8.3.1.40 or later is affected.
- Before 7.13.1.80 or later is affected.