SARA / Free Tools / CVE / CVE-2026-22769

CVE-2026-22769 — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vu

Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence.

CVSS
EPSS
(top 100.00%)
CWE
Published
Last modified
CVSS vector
CISA KEV — Actively Exploited
Added to KEV
2026-02-18
BOD 22-01 due
2026-02-21
Ransomware use
Unknown

01What is this vulnerability?

Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence.

02Affected products

No structured affected-product list available — see references below for vendor advisories.

03Active exploitation status

Yes — actively exploited. Added to the CISA KEV catalog on 2026-02-18. Ransomware use: Unknown.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

CVE-2021-21551
Same vendor: Dell

08Timeline

09References

No additional references available in the KB record.

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →