PT-2026-20781 · Dell · Dell Powerprotect Data Manager

Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-22269

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager has an issue with improper verification of the source of a communication channel within the REST API. A remote attacker with high privileges could bypass protection mechanisms. The affected API endpoint is not specified.

Recommendations Update to version 19.22 or later.

Correção

Enumeração de Fraquezas

CWE-940

Identificadores relacionados

CVE-2026-22269

Produtos afetados

Dell Powerprotect Data Manager

Referências · 5

• https://twitter.com/CVEnew/status/2024501237329395712 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-22269 · Aviso do Fabricante
• https://t.me/CVEtracker/45101 · Publicação no Telegram
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-22269 · Nota de Segurança