Missing Authentication Vulnerability in Dell PowerFlex Manager
CVE-2026-35065
8.8HIGH
What is CVE-2026-35065?
Dell PowerFlex Manager versions are susceptible to a missing authentication vulnerability. This flaw allows an unauthenticated attacker with adjacent network access to potentially exploit the system, enabling a range of malicious activities such as code execution, denial of service, unauthorized information disclosure, information tampering, remote execution, and script injection. It is essential for users to apply the necessary updates to safeguard their systems against potential threats.
Affected Version(s)
PowerFlex 0 < 5.1.0.1 or later
PowerFlex 0 < 4.5.5.2 or later
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dell would like to thank brocked200 for reporting this issue.