CVE-2026-35154
Low
No strong exploitation signal.
CVSS base
6.3
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
0.1%
0.4th percentile
CISA KEV
Not listed
Weakness / dates
CWE-269
Published 2026-04-20 · modified 2026-08-04
CVSS breakdown
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
| Attack Vector | L | Local |
| Attack Complexity | H | High |
| Privileges Required | H | High |
| User Interaction | R | Required |
| Scope | U | Unchanged |
| Confidentiality | H | High |
| Integrity | H | High |
| Availability | H | High |
Timeline
- 2026-04-20 — Published (NVD)
- 2026-08-04 — Last modified (NVD)
Description
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation.