CVE-2026-35154 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-35154MEDIUM

Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 thro…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   H   N  U  H  H  H    6.7   .0009    0.4     —

AFFECTED
  Product                              Versions     Fixed
  PowerProtect Data Domain appliances  unspecified  —

TIMELINE
  Apr 1   Reserved by dell
  Apr 20  Published (CNA: dell)
  Aug 4   RESCORED — CVE-2026-35154 (Dell PowerProtect Data Domain appliances). CVSS 6.3 → 6.7 (NVD).

CWE-269 · CNA: dell · CVSS v3.1 · 1 reference · NVD status: Modified

Description

Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
April 1, 2026	Reserved	Reserved by dell
April 20, 2026	Published	Published (CNA: dell)
August 4, 2026	RESCORED	RESCORED — CVE-2026-35154 (Dell PowerProtect Data Domain appliances). CVSS 6.3 → 6.7 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Dell	PowerProtect Data Domain appliances	—	—	—

Weaknesses

CWE-269

References (1)

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities [Vendor Advisory]

Authoritative record: CVE-2026-35154 at cve.org

Vendors: dell

Weaknesses: CWE-269

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-35154 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.