PT-2026-20779 · Dell · Dell Powerprotect Data Manager

Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-22267

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager versions prior to 19.22 contain an Incorrect Privilege Assignment issue. A low-privileged attacker with remote access could potentially exploit this, leading to Elevation of privileges.

Recommendations Update Dell PowerProtect Data Manager to version 19.22 or later. As a temporary workaround, restrict remote access to the system. Monitor for unusual activity.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-22267

Affected Products

Dell Powerprotect Data Manager

References · 8

• https://osv.dev/vulnerability/CVE-2026-22267 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22267 · Security Note
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Vendor Advisory
• https://twitter.com/offseq/status/2024476615661490642 · Twitter Post
• https://twitter.com/CveTodo/status/2024509368054530361 · Twitter Post
• https://twitter.com/CVEnew/status/2024501233340608868 · Twitter Post
• https://t.me/CVEtracker/45104 · Telegram Post
• https://twitter.com/TheHackerWire/status/2024515187915772179 · Twitter Post