# Dell PowerProtect Data Domain vulnerabilities Source: https://junglewise.ai/threats/technologies/powerprotect-data-domain Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/powerprotect-data-domain.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 58 vulnerabilities in Dell PowerProtect Data Domain: 0 in the last 7 days and 31 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86378, was published on 28 October 2026. 31 vulnerabilities in the last four weeks, up from none in the four before. 4 critical against 0. ## Counts - Last 7 days: 0 - Last 30 days: 31 - Last 90 days: 31 - All time: 58 (6 critical, 0 exploited in the wild) ## About Dell PowerProtect Data Domain A purpose-built backup appliance and data protection storage solution. ## Latest Dell PowerProtect Data Domain vulnerabilities - [CVE-2026-86378: Dell PowerProtect Data Domain stack buffer overflow](https://junglewise.ai/threats/cve-2026-86378-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86377: Dell PowerProtect Data Domain out-of-bounds write](https://junglewise.ai/threats/cve-2026-86377-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.6, published 28 Oct 2026) - [CVE-2026-110541: Dell PowerProtect Data Domain OS command injection](https://junglewise.ai/threats/cve-2026-110541-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-103780: Dell PowerProtect Data Domain stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-103780-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-103779: Dell PowerProtect Data Domain improper authentication](https://junglewise.ai/threats/cve-2026-103779-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.3, published 28 Oct 2026) - [CVE-2026-92665: Dell PowerProtect Data Domain resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-92665-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 5.3, published 28 Oct 2026) - [CVE-2026-86394: Dell PowerProtect Data Domain OS command injection](https://junglewise.ai/threats/cve-2026-86394-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-86393: Dell PowerProtect Data Domain privilege escalation](https://junglewise.ai/threats/cve-2026-86393-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-86392: Dell PowerProtect Data Domain heap buffer overflow](https://junglewise.ai/threats/cve-2026-86392-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 4.9, published 28 Oct 2026) - [CVE-2026-86390: Dell PowerProtect Data Domain missing authorization](https://junglewise.ai/threats/cve-2026-86390-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-86389: Dell PowerProtect Data Domain integer overflow](https://junglewise.ai/threats/cve-2026-86389-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-86388: Dell PowerProtect Data Domain path traversal](https://junglewise.ai/threats/cve-2026-86388-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 5.3, published 28 Oct 2026) - [CVE-2026-86385: Dell PowerProtect Data Domain privilege escalation check bypass](https://junglewise.ai/threats/cve-2026-86385-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86384: Dell PowerProtect Data Domain hard-coded cryptographic key](https://junglewise.ai/threats/cve-2026-86384-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86383: Dell PowerProtect Data Domain path traversal vulnerability](https://junglewise.ai/threats/cve-2026-86383-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 6.8, published 28 Oct 2026) - [CVE-2026-86380: Dell PowerProtect Data Domain integer overflow](https://junglewise.ai/threats/cve-2026-86380-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-90720: Dell PowerProtect Data Domain integrity check bypass](https://junglewise.ai/threats/cve-2026-90720-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 6.7, published 28 Oct 2026) - [CVE-2026-86400: Dell PowerProtect Data Domain improper authentication](https://junglewise.ai/threats/cve-2026-86400-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86399: Dell PowerProtect Data Domain OS command injection](https://junglewise.ai/threats/cve-2026-86399-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 7.2, published 28 Oct 2026) - [CVE-2026-86398: Dell PowerProtect Data Domain path traversal vulnerability](https://junglewise.ai/threats/cve-2026-86398-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86397: Dell PowerProtect Data Domain improper authentication in feature releases](https://junglewise.ai/threats/cve-2026-86397-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86396: Dell PowerProtect Data Domain OS command injection](https://junglewise.ai/threats/cve-2026-86396-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-90726: Dell PowerProtect Data Domain path traversal](https://junglewise.ai/threats/cve-2026-90726-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 6, published 27 Oct 2026) - [CVE-2026-90725: Dell PowerProtect Data Domain stack buffer overflow](https://junglewise.ai/threats/cve-2026-90725-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (medium, CVSS 4.9, published 27 Oct 2026) - [CVE-2026-68866: Dell PowerProtect Data Domain relative path traversal in certificate](https://junglewise.ai/threats/cve-2026-68866-powerprotect-data-domain-feature-release-versions-7-7-1-0-through) (medium, CVSS 6.5, published 27 Oct 2026) ## Most severe Dell PowerProtect Data Domain vulnerabilities - [CVE-2026-103780: Dell PowerProtect Data Domain stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-103780-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86384: Dell PowerProtect Data Domain hard-coded cryptographic key](https://junglewise.ai/threats/cve-2026-86384-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86400: Dell PowerProtect Data Domain improper authentication](https://junglewise.ai/threats/cve-2026-86400-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-86397: Dell PowerProtect Data Domain improper authentication in feature releases](https://junglewise.ai/threats/cve-2026-86397-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-53483: Dell PowerProtect Data Domain improper authentication](https://junglewise.ai/threats/cve-2026-53483-dell-powerprotect-data-domain-improper-authentication) (critical, CVSS 9.8, published 7 Jul 2026) - [CVE-2026-53481: Dell PowerProtect Data Domain path traversal](https://junglewise.ai/threats/cve-2026-53481-dell-powerprotect-data-domain-path-traversal) (critical, CVSS 9.8, published 7 Jul 2026) - [CVE-2026-86378: Dell PowerProtect Data Domain stack buffer overflow](https://junglewise.ai/threats/cve-2026-86378-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86385: Dell PowerProtect Data Domain privilege escalation check bypass](https://junglewise.ai/threats/cve-2026-86385-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86398: Dell PowerProtect Data Domain path traversal vulnerability](https://junglewise.ai/threats/cve-2026-86398-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-86396: Dell PowerProtect Data Domain OS command injection](https://junglewise.ai/threats/cve-2026-86396-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0) (high, CVSS 8.8, published 28 Oct 2026) ## Vulnerabilities per week 31 vulnerabilities in the last four weeks, up from none in the four before. 4 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 31 | 4 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Dell technologies - [Dell Secure Connect Gateway Appliance](https://junglewise.ai/threats/technologies/secure-connect-gateway-appliance): 56 vulnerabilities - [Dell Secure Connect Gateway Application](https://junglewise.ai/threats/technologies/secure-connect-gateway-application): 56 vulnerabilities - [Dell Secure Connect Gateway 5.0 Appliance](https://junglewise.ai/threats/technologies/secure-connect-gateway-5-0-appliance): 40 vulnerabilities - [Dell Secure Connect Gateway 5.0 Application](https://junglewise.ai/threats/technologies/secure-connect-gateway-5-0-application): 40 vulnerabilities - [Dell Policy Manager For Secure Connect Gateway](https://junglewise.ai/threats/technologies/policy-manager-for-secure-connect-gateway): 28 vulnerabilities - [Dell Secure Connect Gateway Policy Manager](https://junglewise.ai/threats/technologies/secure-connect-gateway-policy-manager): 28 vulnerabilities - [Dell OpenManage Enterprise](https://junglewise.ai/threats/technologies/openmanage-enterprise): 26 vulnerabilities - [Dell Data Domain Operating System](https://junglewise.ai/threats/technologies/data-domain-operating-system): 25 vulnerabilities - [Dell PowerFlex Manager](https://junglewise.ai/threats/technologies/powerflex-manager): 22 vulnerabilities - [Dell OpenManage Server Administrator](https://junglewise.ai/threats/technologies/openmanage-server-administrator): 21 vulnerabilities - [Dell Alienware Command Center](https://junglewise.ai/threats/technologies/alienware-command-center): 18 vulnerabilities - [Dell Powerprotect Dp Series Appliance](https://junglewise.ai/threats/technologies/powerprotect-dp-series-appliance): 17 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Dell PowerProtect Data Domain vulnerabilities", https://junglewise.ai/threats/technologies/powerprotect-data-domain, 9 November 2026.