CVE-2026-56085

{
  "id": "CVE-2026-56085",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-03T13:17:30.240",
  "lastModified": "2026-10-25T21:10:00.770",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure."
    },
    {
      "lang": "es",
      "value": "Dell PowerProtect Data Domain, versiones 7.7.1.0 hasta 8.7, versión de lanzamiento LTS2026 8.6.1.0 hasta 8.6.1.10, versión de lanzamiento LTS2025 8.3.1.0 hasta 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 hasta 7.13.1.70 contienen una vulnerabilidad de uso de recurso no inicializado. Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la exposición de información."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "PowerProtect Data Domain",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "8.8.0.0 or later",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "8.6.1.20 or later",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "8.3.1.40 or later",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "7.13.1.80 or later",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-06T15:28:54.811003Z",
          "id": "CVE-2026-56085",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "7.7.1.0",
              "versionEndIncluding": "7.13.1.70",
              "matchCriteriaId": "D81B827B-47D1-4856-ABEE-7FDB8599AD42"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "8.0.0.0",
              "versionEndIncluding": "8.3.1.30",
              "matchCriteriaId": "3A1E837C-2175-494D-8C20-EB25AE30F07F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "8.4.0.0",
              "versionEndIncluding": "8.7.0.0",
              "matchCriteriaId": "FFF0094F-0C71-461F-9760-E9E0AB269FE1"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}