CVE-2026-44268
Received Received - Intake

Incorrect Permission Assignment in Dell PowerProtect Data Domain

Publication date: 2026-07-03

Last updated on: 2026-07-03

Assigner: Dell

Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect permission Assignment for critical resource vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-03
Last Modified
2026-07-03
Generated
2026-07-03
AI Q&A
2026-07-03
EPSS Evaluated
N/A
NVD
CVE-2026-44268
EUVD
EUVD-2026-41533

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
dell powerprotect_data_domain From 7.7.1.0 (inc) to 8.6 (inc)
dell powerprotect_data_domain From 8.6.1.0 (inc) to 8.6.1.10 (inc)
dell powerprotect_data_domain From 8.3.1.0 (inc) to 8.3.1.30 (inc)
dell powerprotect_data_domain From 7.13.1.0 (inc) to 7.13.1.70 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6 and certain LTS releases. It is caused by incorrect permission assignment for a critical resource. A highly privileged attacker with local access could exploit this flaw to gain unauthorized access.

Impact Analysis

The impact of this vulnerability is that an attacker with high privileges and local access could gain unauthorized access to critical resources. This could lead to exposure of sensitive data or unauthorized actions within the affected system.

Compliance Impact

This vulnerability involves incorrect permission assignment for a critical resource in Dell PowerProtect Data Domain, which could allow a high privileged attacker with local access to gain unauthorized access.

Unauthorized access to sensitive data can potentially impact compliance with data protection standards and regulations such as GDPR and HIPAA, which require strict controls on access to personal and protected health information.

However, specific details on how this vulnerability directly affects compliance with these standards are not provided.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart