CVE-2026-22269
Medium · 4.7CVSS
4.7
EPSS
0.2%
Published
Feb 19, 2026
CISA due date
—
The record
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-89178 WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin… CWE-940
- CVE-2026-85085 The Canva Android App before 2.376.0 allowed an external origin to be loaded in a… CWE-940
- CVE-2026-73419 NextAuth.js provides authentication for Next.js. CWE-940
- GHSA-g5qx-h5f3-mp2f TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable… CWE-940
- CVE-2026-54106 The U.S. CWE-940
- CVE-2026-6734 Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across… CWE-940
- CVE-2026-44894 Netty is a network application framework for development of protocol servers and clients. CWE-940
- GHSA-x426-x7cc-3fpc @hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme… CWE-940