Improper Authentication Vulnerability in Dell PowerFlex Manager
CVE-2026-32804

8.1HIGH

Key Information:

Vendor

Dell
Status
Powerflex
Vendor
CVE Published:
17 June 2026

What is CVE-2026-32804?

Dell PowerFlex Manager is impacted by an improper authentication vulnerability that allows unauthorized access to the system. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leveraging it to gain unauthorized capabilities within the environment. This flaw poses a significant risk, necessitating prompt attention from users to mitigate potential threats.

Affected Version(s)

PowerFlex 0 < 5.1.0.1 or later

PowerFlex 0 < 4.5.5.2 or later

References

https://www.dell.com/support/kbdoc/en-us/000477538/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank brocked200 for reporting this issue.
.