Use of Hard-coded Cryptographic Key Vulnerability in Dell PowerProtect Data Domain

CVE-2026-86384

What is CVE-2026-86384?

The vulnerability in Dell PowerProtect Data Domain involves the use of hard-coded cryptographic keys across multiple product versions. An unauthenticated attacker with remote access could exploit this weakness, potentially leading to the exposure of sensitive credentials. These compromised credentials can enable unauthorized system access, allowing the attacker to operate with the privileges of the compromised user, raising serious security concerns.

References