PT-2026-42758 · Dell · Powerflex Manager

Published 2026-04-24 · Updated 2026-05-24 · CVE-2025-32746

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.3

Description An insecure storage of sensitive information allows an unauthenticated attacker with local access to potentially gain unauthorized access to sensitive data.

Recommendations Update to a version newer than 4.6.2.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

BDU:2026-09006

CVE-2025-32746

Affected Products

Powerflex Manager

References · 4

• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09006 · Security Note
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://twitter.com/dailycve/status/2058343408066761109 · Twitter Post