CVE-2026-86378
Published on October 28, 2026
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Vulnerability Analysis
CVE-2026-86378 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-86378 has been classified to as a Stack Overflow vulnerability or weakness.
Affected Versions
Dell PowerProtect Data Domain:- Before 8.9.0.0 or later is affected.
- Before 7.13.1.90 or later is affected.
- Before 8.3.1.50 or later is affected.
- Before 8.6.1.30 or later is affected.