Information Exposure in Dell PowerProtect Data Domain
CVE-2026-46467

5.8MEDIUM

Key Information:

Vendor

Dell
Status
Powerprotect Data Domain
Vendor
CVE Published:
3 July 2026

What is CVE-2026-46467?

This vulnerability in Dell PowerProtect Data Domain allows low privileged attackers with local access to exploit potential weaknesses, leading to sensitive information being exposed in log files. Versions ranging from 7.7.1.0 through 8.7, as well as several LTS releases, are affected. It is crucial for users to take preventive measures to secure their systems against this vulnerability, particularly by ensuring that their software is up to date and applying recommended security patches.

Affected Version(s)

PowerProtect Data Domain 0 < 8.8.0.0 or later

PowerProtect Data Domain 0 < 8.6.1.20 or later

PowerProtect Data Domain 0 < 8.3.1.40 or later

References

https://www.dell.com/support/kbdoc/en-us/000481268/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.