PT-2026-20778 · Dell · Dell Powerprotect Data Manager

Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-22266

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager contains an Improper Verification of Source of a Communication Channel issue in the REST API. A high privileged attacker with remote access could potentially bypass protection mechanisms. The vulnerable component is the REST API.

Recommendations Update Dell PowerProtect Data Manager to version 19.22 or later.

Correção

Enumeração de Fraquezas

CWE-146

Identificadores relacionados

CVE-2026-22266

Produtos afetados

Dell Powerprotect Data Manager

Referências · 5

• https://osv.dev/vulnerability/CVE-2026-22266 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2024501236268224531 · Publicação no Twitter
• https://t.me/CVEtracker/45102 · Publicação no Telegram
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-22266 · Nota de Segurança