PT-2026-20779 · Dell · Dell Powerprotect Data Manager

Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-22267

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager versions prior to 19.22 contain an Incorrect Privilege Assignment issue. A low-privileged attacker with remote access could potentially exploit this, leading to Elevation of privileges.

Recommendations Update Dell PowerProtect Data Manager to version 19.22 or later. As a temporary workaround, restrict remote access to the system. Monitor for unusual activity.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-22267

Produtos afetados

Dell Powerprotect Data Manager

Referências · 8

• https://twitter.com/offseq/status/2024476615661490642 · Publicação no Twitter
• https://twitter.com/CveTodo/status/2024509368054530361 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-22267 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2024501233340608868 · Publicação no Twitter
• https://t.me/CVEtracker/45104 · Publicação no Telegram
• https://twitter.com/TheHackerWire/status/2024515187915772179 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22267 · Nota de Segurança
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Aviso do Fabricante