CVE-2026-49502
Undergoing Analysis Undergoing Analysis - In Progress
Improper Authentication in Dell PowerFlex Manager

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Dell

Description
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
CVE-2026-49502
EUVD
EUVD-2026-37729
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dell powerflex_manager *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The vulnerability in Dell PowerFlex Manager allows an unauthenticated attacker with adjacent network access to potentially cause information disclosure, information tampering, and unauthorized access.

Such impacts could lead to non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and prevention of unauthorized access.

However, specific effects on compliance are not detailed in the provided information.

Executive Summary

This vulnerability exists in Dell PowerFlex Manager and is classified as an Improper Authentication issue. It allows an unauthenticated attacker who has adjacent network access to potentially exploit the system.

Exploitation of this vulnerability could lead to information disclosure, information tampering, and unauthorized access.

Impact Analysis

If exploited, this vulnerability can result in unauthorized access to the system, which may lead to sensitive information being disclosed or tampered with.

Such impacts could compromise the confidentiality and integrity of data managed by Dell PowerFlex Manager.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49502. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart