PT-2026-42760 · Dell · Powerflex Rack+2

CVE-2025-32749 · Published 2026-04-24 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.3 Dell PowerFlex Appliance (affected versions not specified) Dell PowerFlex Rack (affected versions not specified)

Description An issue exists due to incorrectly used default permissions and an exposure of information through directory listing. An unauthenticated attacker with remote access could exploit this to disclose protected information.

Recommendations Update Dell PowerFlex Manager to version 4.6.3 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Dell PowerFlex Appliance and Dell PowerFlex Rack.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2026-09007

CVE-2025-32749

Affected Products

Powerflex Appliance

Powerflex Manager

Powerflex Rack

References · 4

• https://bdu.fstec.ru/vul/2026-09007 · Security Note
• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32749 · Security Note