CVE-2026-22769Vulnerability
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Reported by 3 independent sources · first reported by CERT-EU · last reported
Last reported 8 days ago
Fix due 21 Feb 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 96% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day“…CitrixBleed), Ivanti Connect Secure (CVE-2023-46805, CVE-2024-21887, and CVE-2025-0282), and Dell RecoverPoint for Virtual Machines (CVE-2026-22769).”
-
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes“With vulnerabilities in Dell products (CVE-2021-21551 and CVE-2026-22769) having come under active exploitation in recent years, it's essential to apply the necessary fixes for optimal protection.”
-
Cyber Brief 26-03 - February 2026“On February 17, Google Threat Intelligence Group (GTIG) reported that China-linked UNC6201 was exploiting CVE-2026-22769 in Dell RecoverPoint for Virtual Machines since mid-2024, allowing lateral movement, persistent access, and the deployment of malware including SLAYSTYLE, BRIC…”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-21509, CVE-2026-1281, CVE-2026-1340, CVE-2025-26399, CVE-2025-40551, CVE-2023-4966, CVE-2024-21887, CVE-2023-46805, CVE-2025-0282, CVE-2026-63688, CVE-2026-63692, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, CVE-2026-67273, CVE-2021-21551, CVE-2026-102764
Thanks — we review every report.