{"id":"CVE-2026-86384","published":"2026-10-28T10:17:09Z","modified":"2026-10-29T11:17:35Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…","vendor":"Dell","product":"PowerProtect Data Domain","tier":"core","eol":null,"description":{"text":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user.","provenance":"source","from":"NVD"},"summary":{"text":"Dell PowerProtect Data Domain contains a hard-coded cryptographic key flaw (classified as use of hard-coded cryptographic key) in its feature release versions 7.7.1.0 through 8.8 and in several LTS2024, LTS2025 and LTS2026 release lines. An unauthenticated attacker with remote network access can exploit it, without user interaction, to expose credentials and then use them to access the system with the compromised user's privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:24:36Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.00472,"percentile":0.40858,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":3,"pulses":[{"name":"Known_Cve | Oct 31, 2026 | Part 2/3","url":"https://otx.alienvault.com/pulse/6ae4af06a3790b65a9afe87a","created":"2026-10-30"},{"name":"Known_Cve | Oct 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/6ae35d945cba1d70e2bf3a79","created":"2026-10-29"},{"name":"Known_Cve | Oct 29, 2026 | Part 3/3","url":"https://otx.alienvault.com/pulse/6ae20c338ef6b2d900217a8b","created":"2026-10-28"}],"provenance":"machine"},"cwes":[{"id":"CWE-321","name":"Use of Hard-coded Cryptographic Key"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-111974","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111974","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-28","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86384","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":16.4,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":8.17,"detail":"percentile 0.4086"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}