Dell PowerFlex Manager
CVE-2026-35067
HIGH
Severity by source
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Adjacent-network reachability to the management plane (AV:A), valid low-tier account required (PR:L), no user interaction, and full administrative takeover of storage cluster yields C:H/I:H/A:H.
Primary rating from Vendor (dell).
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
AnalysisAI
Privilege escalation in Dell PowerFlex Manager allows a low-privileged attacker on an adjacent network segment to bypass access controls and gain unauthorized elevated access to the management plane. The CVSS 8.0 (High) score reflects significant confidentiality, integrity, and availability impact, though there is no public exploit identified at time of analysis and EPSS rates exploitation probability at only 0.13% (3rd percentile). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must (1) have network reachability to the PowerFlex Manager interface from the same adjacent/L2 network segment (AV:A precludes exploitation across the open internet or through routed segments not bridged to the management LAN), and (2) hold valid credentials for a low-privileged PowerFlex Manager account (PR:L) - fully unauthenticated exploitation is not supported by the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are sharply mixed and warrant careful prioritization. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has compromised a low-privilege operator account - or pivoted onto the storage management VLAN from a breached jump host or monitoring appliance - sends crafted API or UI requests to PowerFlex Manager that invoke functions the authorization layer fails to gate, escalating to administrative privileges over the storage cluster. From there the attacker can read or tamper with tenant storage objects, alter cluster configuration, or disrupt availability. … |
| Remediation | Patch available per vendor advisory - apply the fixed PowerFlex Manager release documented in Dell DSA-2026-066 (https://www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities); exact fix versions are not reproduced in the NVD record and must be read directly from the Dell knowledge base article. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Dell PowerFlex Manager installations in production and document their network location, management access scope, and user populations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More from same product – last 7 days
Missing authentication on a critical function in Dell PowerFlex Manager allows an adjacent-network attacker to invoke pr
Authentication bypass in Dell PowerFlex Manager allows an unauthenticated attacker with adjacent-network access to gain
Improper authentication in Dell PowerFlex Manager allows unauthenticated attackers with adjacent network access to bypas
SQL injection in Dell PowerFlex Manager allows a low-privileged attacker with adjacent-network access to inject SQL comm
Information disclosure in Dell PowerFlex Manager versions prior to 4.8 stems from inclusion of functionality from an unt
Share
External POC / Exploit Code
Leaving vuln.today