CVE-2026-22769

critical · 10Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2026-02-18Remediation due 2026-02-21

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

CVSS

13.3%

EPSS (exploit prob.)

96th

EPSS percentile

2026-02-17

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-798

Affected products

Vendor	Product	Affected versions
dell	recoverpoint_for_virtual_machines	< 6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0
dell	recoverpoint_for_virtual_machines	6.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-22769