← Back

CVE-2026-35065

nvd nist
Published: Jun 17, 2026Modified: Jun 25, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: security_alert@emc.com (Secondary)

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.

Affected (2)

Dell
1 product
Powerflex Manager
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Powerflex Manager
Before 4.5.5.2
Powerflex Manager
From 4.6.0 to 5.1.0.1

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.