VULNERABILITY INTELLIGENCE

CVE-2026-35154

CVSS score6.3 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2026-04-20
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation.

Weakness classification

  • security_alert@emc.com: CWE-269

Primary references