PT-2026-57156 · Dell · Powerflex Manager

Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-56689

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 5.1.0.1

Description An improper neutralization of special elements used in an SQL command, known as SQL Injection, exists in the software. A low privileged attacker with remote access could exploit this issue to cause information exposure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-56689

Affected Products

Powerflex Manager

References · 3

• https://dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56689 · Security Note
• https://twitter.com/HugoValters/status/2075633034007630131 · Twitter Post