Search/CVE-2026-22769
● CVE — Critical

CVE-2026-22769

VendordellProductrecoverpoint for virtual machinesDiscoveredFeb 17, 2026UpdatedFeb 18, 2026

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.

CVSS v3.1
10 CRITICAL
EPSS
13.5%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
8
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.40pp
13.1% → 13.5% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Feb 17, 2026
Disclosure — published as a CVE record.
Feb 18, 2026
securityweek.com reports: Dell RecoverPoint Zero-Day Exploited by Chinese Cyberespionage Group
Feb 18, 2026
thehackernews.com reports: Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024
Feb 18, 2026
helpnetsecurity.com reports: China-linked hackers exploited Dell zero-day since 2024 (CVE-2026-22769)
Feb 18, 2026
therecord.media reports: Fed agencies ordered to patch Dell bug by Saturday after exploitation warning
Mar 26, 2026
redhotcyber.com reports: Una vulnerabilità Critica in Dell RecoverPoint Semina il Caos. Il malware GRIMBOLT in azione
Oct 2, 2026
bleepingcomputer.com reports: Dell asks admins to patch max severity CSM flaws as soon as possible
Oct 2, 2026
thehackernews.com reports: Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Oct 5, 2026
bleepingcomputer.com reports: New Dell System Update flaw lets hackers gain root privileges