Improper Access Control Vulnerability in Dell PowerFlex Manager
CVE-2026-35067

5.7MEDIUM

Key Information:

Vendor

Dell
Status
Powerflex
Vendor
CVE Published:
17 June 2026

What is CVE-2026-35067?

Dell PowerFlex Manager is susceptible to an improper access control vulnerability, allowing attackers with limited privileges on an adjacent network to potentially elevate their access levels. This flaw could enable unauthorized users to gain access to sensitive information and system functionalities, posing a serious risk to data integrity and security.

Affected Version(s)

PowerFlex 0 < 5.1.0.1 or later

PowerFlex 0 < 4.5.5.2 or later

References

https://www.dell.com/support/kbdoc/en-us/000477538/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank brocked200 for reporting this issue.
.