The Hacker - China-linked UNC6201 exploited a CVSS 10.0 (CVE-2026-22769) Dell ...

Back Facebook

The Hacker - China-linked UNC6201 exploited a CVSS 10.0 (CVE-2026-22769) Dell ...

Facebook • February 18, 2026

Share: View original

China-linked UNC6201 exploited a CVSS 10.0 (CVE-2026-22769) Dell RecoverPoint zero-day since 2024 using hard-coded credentials.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Exploit Dell Zero-Day Flaw CVE-2026-22769 Since Mid-2024 A Chinese state-backed hacking group, UNC6201, has been exploiting a critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines since at least mid-2024. The flaw, tracked as CVE-2026-22769, features a maximum severity rating due to hardcoded credentials, allowing unauthorized access to VMware virtual machine backups. This exploitation was revealed by Mandiant and the Google Threat Intelligence Group on February 17, 2026. 40 sources 70

Extracted Entities

APT Groups (1)

Attack Types (1)

Zero-day Exploit

CVEs (1)

MITRE ATT&CK (2)

T1190 - Exploit Public-Facing Application T1552.001 - Credentials In Files

Platforms (1)

Vulnerabilities (1)

RecoverPoint Zero-day