PT-2026-50432 · Dell · Powerflex

Published 2026-06-17 · Updated 2026-06-17 · CVE-2026-32804

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 5.1.0.1 Dell PowerFlex Manager versions prior to 4.5.5.2

Description An improper authentication issue allows an unauthenticated attacker with adjacent network access to bypass authentication without credentials or user interaction. Successful exploitation can lead to unauthorized high-impact write access to the system and may cause a denial of service. Adjacent network access means the attacker must be located on the same network segment or VLAN.

Recommendations Upgrade to PowerFlex Software 5.1.0.1 or later. Upgrade to PowerFlex Software 4.5.5.2 or later for the 4.x branch.

Fix

DoS

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-32804

Affected Products

Powerflex

References · 2

• https://dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities · Vendor Advisory
• https://twitter.com/UpwindMDR/status/2067290777340784988 · Twitter Post