CVE-2026-22769

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

Scoring

Severity
CRITICAL
CVSS base score
10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS probability
13.12%
CISA KEV
Known exploited vulnerability
CWE
CWE-798
Published
2026-02-17
Last modified
2026-02-26

Affected products

Weakness type

Related vulnerabilities

Markdown version · Browse all CVEs