CVE-2026-35154 — Vulnetix

CVE-2026-35154 PUBLISHED CVSS 6.300000190734863 MEDIUM

Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability in IDRAC. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation in IDRAC.

EPSS 0.01% · 2.2th percentile

Risk Scores

CVSS 3.1

6.300000190734863

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.01%

2.2th percentile

Affected Products

Vendor	Product	Versions
Dell	PowerProtect Data Domain appliances	0, 0, 0

Exploit Intelligence

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities (circl)

Timeline

Apr 20, 2026 CVE Published
Apr 21, 2026 Security Advisory
May 11, 2026 CVE Updated
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score
May 23, 2026 EPSS Score
May 24, 2026 EPSS Score
May 25, 2026 EPSS Score
May 26, 2026 EPSS Score

References

Open in Interactive Console →