Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-22769 | Hard-coded credentials in Dell RecoverPoint for Virtual Machines allow root OS access | 10.0 | 14% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 140.82.18.134 | uncover additional IP addresses using the same certificate: 140.82.18[.]134 and 66.42.111[.]219. "Analysis of these IP addresses reve |
| ipv4 | 149.248.11.71 | X.509 certificate 's subject field value for the IP address 149.248.11[.]71 – CN=WIN-DO6FVJH67FN – to uncover additional IP addresses |
From the original article
5 min read at thehackernews.com
A maximum severity security vulnerability in Dell RecoverPoint for Virtual Machines has been exploited as a zero-day by a suspected China-nexus threat cluster dubbed UNC6201 since mid-2024, according to a new report from Google Mandiant and Google Threat Intelligence Group (GTIG). The activity involves the exploitation of CVE-2026-22769 (CVSS score: 10.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.