Dell · Sandworm Watch

Feb 18, 2026high

CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2026-22769EPSS 13.1%DellRecoverPoint for Virtual Machines (RP4VMs)

CISA KEV ↗ · unattributed attribution

Mar 31, 2022high

CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability

Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure. Required action: Apply updates per vendor instructions.

CVE-2021-21551EPSS 58.1%Delldbutil Driver

CISA KEV ↗ · unattributed attribution