PT-2026-42756 · Dell · Powerflex Manager

Published 2026-04-24 · Updated 2026-05-22 · CVE-2025-26483

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.2

Description An open redirect issue exists where an unauthenticated attacker can redirect a targeted application user to arbitrary web URLs. This flaw can be leveraged to conduct phishing attacks to trick users into revealing sensitive information.

Recommendations Update Dell PowerFlex Manager to version 4.6.2 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2026-09004

CVE-2025-26483

Affected Products

Powerflex Manager

References · 3

• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09004 · Security Note