CVE-2026-22267

CVE-2026-22267 is an Incorrect Privilege Assignment vulnerability affecting Dell PowerProtect Data Manager versions prior to 19.22. A remote, low-privileged attacker could exploit this to achieve Elevation of Privileges, leading to high impact on confidentiality, integrity, and availability. With a CVSS score of 8.8 (High), it is easily exploitable over the network with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.