CVE-2026-22769

10.0 CRITICAL CISA KEV - Actively Exploited
Published: February 17, 2026 Modified: February 20, 2026
View on NVD

Description

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079
Source: security_alert@emc.com
Patch Vendor Advisory
https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-22769
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

3 reference(s) from NVD

Quick Stats

CVSS v3 Score
10.0 / 10.0
EPSS (Exploit Probability)
34.2%
97th percentile
Exploitation Status
Actively Exploited
Remediation due: 2026-02-21

Weaknesses (CWE)

CWE-798 CWE-798

Affected Vendors

dell

Related CVEs

CVE-2026-4472 6.3
CVE-2026-4471 4.7
CVE-2026-4470 4.7
CVE-2026-4469 4.7
CVE-2026-33035 N/A