עברית

Vulnerability Intelligence

CVE-2025-43914

High 7.8

Published
Last modified
NVD status
Analyzed

Description

Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected products

dell: data domain operating system

References1

Metrics

CVSS 3.1
7.8 HIGH Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 1 · as of 9 November 2026
CWE
CWE-266

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.