PT-2026-20781 · Dell · Dell Powerprotect Data Manager

Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-22269

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 19.22

Description Dell PowerProtect Data Manager has an issue with improper verification of the source of a communication channel within the REST API. A remote attacker with high privileges could bypass protection mechanisms. The affected API endpoint is not specified.

Recommendations Update to version 19.22 or later.

Fix

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2026-22269

Affected Products

Dell Powerprotect Data Manager

References · 5

• https://osv.dev/vulnerability/CVE-2026-22269 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22269 · Security Note
• https://twitter.com/CVEnew/status/2024501237329395712 · Twitter Post
• https://t.me/CVEtracker/45101 · Telegram Post