PT-2026-20778 · Dell · Dell Powerprotect Data Manager

Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-22266

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager contains an Improper Verification of Source of a Communication Channel issue in the REST API. A high privileged attacker with remote access could potentially bypass protection mechanisms. The vulnerable component is the REST API.

Recommendations Update Dell PowerProtect Data Manager to version 19.22 or later.

Fix

Weakness Enumeration

CWE-146

Related Identifiers

CVE-2026-22266

Affected Products

Dell Powerprotect Data Manager

References · 5

• https://osv.dev/vulnerability/CVE-2026-22266 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22266 · Security Note
• https://twitter.com/CVEnew/status/2024501236268224531 · Twitter Post
• https://t.me/CVEtracker/45102 · Telegram Post