Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-22266 EUVD-2026-8337GHSA-9cwr-5hg5-h48h

Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnera…

Published Feb 19, 2026 · Updated Feb 20, 2026 · Assigned by dell

Description

Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Affected products

VendorProductAffectedFixed
Dell PowerProtect Data Manager N/A – < 19.22.0-24 or later 19.22.0-24 or later

References