PT-2026-50431 · Dell · Powerflex Manager

Michele Damico · CVE-2026-22283 · Published 2026-06-17 · Updated 2026-06-25

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.8

Description An unauthenticated attacker with remote access can exploit the inclusion of functionality from an untrusted control sphere, which may lead to information disclosure.

Recommendations Update to version 4.8 or later.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2026-22283

Affected Products

Powerflex Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-22283 · Security Note
• https://dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities · Vendor Advisory
• https://twitter.com/vuldb/status/2067533605350539580 · Twitter Post
• https://t.me/cveNotify/175140 · Telegram Post
• https://t.me/cveNotify/169467 · Telegram Post