Hard-coded credentials in Dell RecoverPoint for Virtual Machines
Priority CRITICAL 100Exploited in the wildCWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.
Summary
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.
Why it matters now
Exploitation Active In CISA KEV since 2026-02-18CISA due date 2026-02-21
EPSS 0.13525 96th percentileScored 2026-11-07
Fix Fixed RecoverPoint for Virtual Machines (Dell): 6.0.3.1 HF1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | RecoverPoint for Virtual Machines | 5.3 SP4 P1 to before 6.0.3.1 HF1 | 6.0.3.1 HF1 | Patch available | CNA |
| Dell | RecoverPoint for Virtual Machines | 6.0, 6.0 SP1, 6.0 SP1 P1, 6.0 SP1 P2, 6.0 SP2, 6.0 SP2 P1, 6.0 SP3, and 6.0 SP3 P1 to before 6.0.3.1 HF1 | 6.0.3.1 HF1 | Patch available | CNA |
- RecoverPoint for Virtual Machines VendorDell Affected 5.3 SP4 P1 to before 6.0.3.1 HF1 Fixed in 6.0.3.1 HF1 Patch available CNA
- RecoverPoint for Virtual Machines VendorDell Affected 6.0, 6.0 SP1, 6.0 SP1 P1, 6.0 SP1 P2, 6.0 SP2, 6.0 SP2 P1, 6.0 SP3, and 6.0 SP3 P1 to before 6.0.3.1 HF1 Fixed in 6.0.3.1 HF1 Patch available CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:* | before 6.0 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:-:*:*:*:*:*:* | 6.0 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1:*:*:*:*:*:* | 6.0 sp1 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p1:*:*:*:*:*:* | 6.0 sp1_p1 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p2:*:*:*:*:*:* | 6.0 sp1_p2 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2:*:*:*:*:*:* | 6.0 sp2 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2_p1:*:*:*:*:*:* | 6.0 sp2_p1 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3:*:*:*:*:*:* | 6.0 sp3 | Vulnerable | Dell |
| cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3_p1:*:*:*:*:*:* | 6.0 sp3_p1 | Vulnerable | Dell |
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:* Versions before 6.0 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1:*:*:*:*:*:* Versions 6.0 sp1 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p1:*:*:*:*:*:* Versions 6.0 sp1_p1 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p2:*:*:*:*:*:* Versions 6.0 sp1_p2 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2:*:*:*:*:*:* Versions 6.0 sp2 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2_p1:*:*:*:*:*:* Versions 6.0 sp2_p1 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3:*:*:*:*:*:* Versions 6.0 sp3 Vulnerable ·Dell
- cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3_p1:*:*:*:*:*:* Versions 6.0 sp3_p1 Vulnerable ·Dell
Remediation
- Fix · CNA RecoverPoint for Virtual Machines (Dell) Fixed in 6.0.3.1 HF1
- Fix · CNA RecoverPoint for Virtual Machines (Dell) Fixed in 6.0.3.1 HF1
Timeline
- 2026-02-18 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2026-22769
- 2026-10-03 Alias added: GHSA-c56r-fcf4-6rp2
References
More Dell Recoverpoint For Virtual Machines vulnerabilities
- TI-2024-14999 Unrestricted file upload in Dell RecoverPoint for VMs CVSS 3.1CRITICAL 9.8
- TI-2024-19170 Broken or risky cryptographic algorithm in Dell RecoverPoint for Virtual Machines CVSS 3.1CRITICAL 9.8
- TI-2024-32212 Hard-coded credentials in Dell RecoverPoint for Virtual Machines CVSS 3.1CRITICAL 9.8
- TI-2024-25727 Missing brute-force protection in Dell RecoverPoint for Virtual Machines CVSS 3.1CRITICAL 9.8
- TI-2024-14998 Missing brute-force protection in Dell RecoverPoint for VMs CVSS 3.1CRITICAL 9.8
- TI-2024-15029 Improper signature verification in Dell RecoverPoint for Virtual Machines CVSS 3.1HIGH 8.8
Sources
- CVE-2026-22769 · CVE Program
- CVE-2026-22769 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-c56r-fcf4-6rp2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences