CVE-2026-22283
Undergoing Analysis Undergoing Analysis - In Progress
Information Disclosure in Dell PowerFlex Manager

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Dell

Description
Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
CVE-2026-22283
EUVD
EUVD-2026-37726
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dell powerflex_manager to 4.8 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Dell PowerFlex Manager versions prior to 4.8. It is an Inclusion of Functionality from Untrusted Control Sphere vulnerability, which means that an unauthenticated attacker with remote access could exploit it. Exploitation could lead to information disclosure.

Impact Analysis

The impact of this vulnerability includes potential information disclosure. An unauthenticated remote attacker could exploit the vulnerability to gain access to sensitive information, which could compromise confidentiality, integrity, and availability.

Compliance Impact

This vulnerability in Dell PowerFlex Manager allows an unauthenticated remote attacker to potentially cause information disclosure.

Information disclosure vulnerabilities can impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of sensitive data and personal information.

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, thereby potentially violating data protection requirements under these regulations.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22283. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart