CVE-2026-32804
Modified Modified - Updated After Analysis

Improper Authentication in Dell PowerFlex Manager

Vulnerability report for CVE-2026-32804, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-06-17

Last updated on: 2026-06-25

Assigner: Dell

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-17
Last Modified
2026-06-25
Generated
2026-07-07
AI Q&A
2026-06-17
EPSS Evaluated
2026-07-06
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell powerflex_manager to 4.5.5.2 (exc)
dell powerflex_manager From 4.6.0 (inc) to 5.1.0.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell PowerFlex Manager contains an Improper Authentication vulnerability. This means that an attacker who is not authenticated and has access to the adjacent network could exploit this flaw to gain unauthorized access to the system.

Compliance Impact

The vulnerability in Dell PowerFlex Manager allows unauthorized access due to improper authentication by an unauthenticated attacker with adjacent network access.

Such unauthorized access could potentially lead to violations of compliance requirements in standards and regulations like GDPR and HIPAA, which mandate strict controls on access to sensitive data and systems.

However, specific impacts on compliance are not detailed in the provided information.

Impact Analysis

Exploitation of this vulnerability could allow an attacker to gain unauthorized access, potentially leading to high impact on integrity and availability of the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32804. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart