ctrlINT What the industry said about every indicator, with the quote

CVE-2026-22769Vulnerability

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by CERT-EU · last reported

Last reported 8 days ago

CISA KEVAdded 18 Feb 2026
Fix due 21 Feb 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS13.5%
higher than 96% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each
  1. “…CitrixBleed), Ivanti Connect Secure (CVE-2023-46805, CVE-2024-21887, and CVE-2025-0282), and Dell RecoverPoint for Virtual Machines (CVE-2026-22769).”

    SecurityWeekNews
    Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
  2. “With vulnerabilities in Dell products (CVE-2021-21551 and CVE-2026-22769) having come under active exploitation in recent years, it's essential to apply the necessary fixes for optimal protection.”

    The Hacker NewsNews
    Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
  3. “On February 17, Google Threat Intelligence Group (GTIG) reported that China-linked UNC6201 was exploiting CVE-2026-22769 in Dell RecoverPoint for Virtual Machines since mid-2024, allowing lateral movement, persistent access, and the deployment of malware including SLAYSTYLE, BRIC…”

    CERT-EUGovernment
    Cyber Brief 26-03 - February 2026

Indicators reported together

named in the same reports

Also named with it: CVE-2026-21509, CVE-2026-1281, CVE-2026-1340, CVE-2025-26399, CVE-2025-40551, CVE-2023-4966, CVE-2024-21887, CVE-2023-46805, CVE-2025-0282, CVE-2026-63688, CVE-2026-63692, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, CVE-2026-67273, CVE-2021-21551, CVE-2026-102764

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-22769 here?
No account needed. We do not store your IP address.