CVE-2026-49502

Modified Modified - Updated After Analysis

Improper Authentication in Dell PowerFlex Manager

Publication date: 2026-06-17

Last updated on: 2026-06-25

Assigner: Dell

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-25

Generated

2026-07-08

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-49502

EUVD

EUVD-2026-37729

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerflex_manager	to 4.5.5.2 (exc)
dell	powerflex_manager	From 4.6.0 (inc) to 5.1.0.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Compliance Impact

The vulnerability in Dell PowerFlex Manager allows an unauthenticated attacker with adjacent network access to potentially cause information disclosure, information tampering, and unauthorized access.

Such impacts could lead to non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and prevention of unauthorized access.

However, specific effects on compliance are not detailed in the provided information.

Executive Summary

This vulnerability exists in Dell PowerFlex Manager and is classified as an Improper Authentication issue. It allows an unauthenticated attacker who has adjacent network access to potentially exploit the system.

Exploitation of this vulnerability could lead to information disclosure, information tampering, and unauthorized access.

Impact Analysis

If exploited, this vulnerability can result in unauthorized access to the system, which may lead to sensitive information being disclosed or tampered with.

Such impacts could compromise the confidentiality and integrity of data managed by Dell PowerFlex Manager.

Hi! I’m here to help you understand CVE-2026-49502. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70