CVE-2025-26483

Published: May 22, 2026Modified: Jul 23, 2026

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Exploitability: 2.8 / Impact: 4.7

Source: NVD

Description

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

Affected (3)

Products: Dell: Powerflex Appliance Intelligent Catalog, Powerflex Manager, Powerflex Rack

3 products

Powerflex Appliance Intelligent Catalog

Powerflex Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dell Powerflex Appliance Intelligent Catalog	Before 48.383.00
Dell Powerflex Manager	Up to 4.6.2
Dell Powerflex Rack	Before 3.7.8.0

Related CWEs

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.