CVE-2026-22266

Medium · 4.7

CVSS

4.7

EPSS

0.3%

Published

Feb 19, 2026

CISA due date

—

The record

Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Affected packages

Ecosystem	Package	Introduced	Fixed