{"affected":[{"defaultStatus":"unaffected","product":"PowerProtect Data Domain","source":"CNA: dell","vendor":"Dell","versions":[{"lessThan":"8.9.0.0 or later","status":"affected","version":"0","versionType":"semver"},{"lessThan":"8.3.1.50 or later","status":"affected","version":"0","versionType":"semver"},{"lessThan":"8.6.1.30 or later","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-86383","cwes":["CWE-22"],"description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.","epss":{"date":"2026-11-02","percentile":0.39834,"score":0.0046},"exploits":[],"kev":null,"metrics":[{"score":6.8,"severity":"medium","source":"CNA: dell","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793710285850,"publishedAt":1793181294400,"references":[{"source":"CNA: dell","tags":["vendor-advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities"}],"remediation":[],"revision":"d5d78d6f861331c58bd82abaf88bcf23e3ac8a3e74219dea0be2cbaa53f5e7a6","sources":[{"modifiedAt":1793710285850,"name":"CNA: dell","retrievedAt":1793711395150,"url":"https://www.cve.org/CVERecord?id=CVE-2026-86383"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793711398819,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-86383"}],"ssvc":{"assessedAt":1793710252269,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-86383","updatedAt":1793711398819}