What’s Vulnerable › Vulnerabilities

CVE-2022-26949

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-30 · updated 2026-06-17

Description

Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authenticated malicious user could potentially exploit this vulnerability to gain access to files that should only be allowed by extra privileges.

Affected products

• Dell RSA Archer: from 6.1.0.0 before 6.9.2.2 — fixed in 6.9.2.2

How to fix

Upgrade to a fixed version: Dell RSA Archer 6.9.2.2. Check the vendor advisory for mitigations.

References

• https://www.archerirm.community/t5/general-support-information/tkb-p/information-support
• https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
• https://www.archerirm.community/t5/general-support-information/tkb-p/information-support
• https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497

Get alerted when CVE-2022-26949 or the next vulnerability affects your stack