CVE-2026-22769

State: Published
Severity: 10.0 Critical
Published: Feb 17, 2026
Updated: Feb 26, 2026
Reserved: Jan 9, 2026

Description

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	dell

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
RecoverPoint for Virtual MachinesDell	5.3 SP4 P1 to before 6.0.3.1 HF1Affected
RecoverPoint for Virtual MachinesDell	6.0, 6.0 SP1, 6.0 SP1 P1, 6.0 SP1 P2, 6.0 SP2, 6.0 SP2 P1, 6.0 SP3, and 6.0 SP3 P1 to before 6.0.3.1 HF1Affected

References

https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-22769government-resource
https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-daythird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.