Vulnerability record/PUBLISHED/Published Oct 27, 2026 11:39:36 UTC

CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

Base score6.3/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredHighPR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactLowC

Integrity impactHighI

Availability impactHighA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authoritydell

Last updatedOct 27, 2026 11:39:36 UTC

PublishedOct 27, 2026 11:39:36 UTC

ReservedSep 13, 2026 10:04:17 UTC