Dell PowerProtect DataDomain Privilege Escalation (v7.7.1.0-8.6.1.20)
CVE-2026-90728 Published on October 27, 2026
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Vulnerability Analysis
CVE-2026-90728 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a high impact on integrity and availability.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Versions
Dell PowerProtect Data Domain:- Before 8.9.0.0 or later is affected.
- Before 7.13.1.90 or later is affected.
- Before 8.3.1.50 or later is affected.
- Before 8.6.1.30 or later is affected.