Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-22769

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

10.0
CVSS 3.1
1
story
FEB 18
added to KEV
Severity
10.0 Critical · NVD score
Vendor
Dell
Product
RecoverPoint for Virtual Machines (RP4VMs)
Published
Feb 17, 2026
Added to KEV
Feb 18, 2026
KEV deadline
Feb 21, 2026
Ransomware use
Unknown
Weakness
CWE-798

What it is

Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesChinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024The hardcoded credential vulnerability (CVE-2026-22769) exists in Dell RecoverPoint for Virtual Machines and has been exploited since mid-2024.DECIPHER · 2 MIN

Official references

5 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixdell.com/support/kbdoc/en-us/000426773/dsa-2026-079Analysiscloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day