PT-2026-42759 · Dell · Powerflex Rack+2

CVE-2025-32747 · Published 2026-04-24 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.2 Dell PowerFlex Appliance (affected versions not specified) Dell PowerFlex Rack (affected versions not specified)

Description An incorrect privilege assignment issue exists where a low privileged attacker with local access can exploit the flaw to achieve elevation of privileges.

Recommendations Update Dell PowerFlex Manager to a version newer than 4.6.2. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Dell PowerFlex Appliance. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Dell PowerFlex Rack.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2026-09012

CVE-2025-32747

Affected Products

Powerflex Appliance

Powerflex Manager

Powerflex Rack

References · 4

• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09012 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-32747 · Security Note