Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2026-22769
Critical · 10.0
KEV High · 62 CWE-798 Feb 17, 2026
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.
CVE-2021-21551
High · 7.8
KEV Urgent · 76 Public exploit CWE-782 May 4, 2021
Dell dbutil Driver Insufficient Access Control Vulnerability
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVE-2020-11899
Medium · 5.4
KEV High · 53 CWE-125 Jun 17, 2020
Treck TCP/IP stack Out-of-Bounds Read Vulnerability
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.