CVE-2026-22269

Published: Feb 19, 2026Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitability: 1.2 / Impact: 3.4

Source: security_alert@emc.com (Secondary)

Description

Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Affected (1)

Products: Dell: Powerprotect Data Manager

1 product

Powerprotect Data Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Powerprotect Data Manager	Before 19.22

Related CWEs

Improper Verification of Source of a Communication Channel

The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References (1)

https://www.dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.