Dell PowerFlex Manager CVE-2026-56690

Exploitation requires network access to the PowerFlex Manager management interface plus valid low-privilege authentication (CVSS PR:L) - a completely unauthenticated attacker cannot exploit this per the provided vector. No user interaction is required (UI:N) and attack complexity is low (AC:L), so any holder of a low-privilege account on an in-scope version (prior to 5.1.0.1) can trigger it against a reachable instance. The description does not name a specific non-default feature or configuration toggle, so the limiting factors are: possession of authenticated credentials, network reachability of the manager interface, and running a vulnerable version below 5.1.0.1.

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5) signals a network-reachable, low-complexity attack requiring only low-privilege authentication and no user interaction - a realistic priority for any exposed PowerFlex Manager instance. No EPSS score was provided, so exploitation probability cannot be quantified, and the vulnerability is not in CISA KEV, so there is no evidence of active exploitation. No POC was referenced. The dominant impact is confidentiality (C:H) with limited integrity (I:L) and no availability impact (A:N), which fits a data-exposure SQLi rather than full system takeover. Net: a genuinely high-severity, low-barrier flaw whose real-world urgency is tempered by the requirement for valid (even if low-privilege) credentials and the absence of any observed exploitation - patch promptly but it is not a confirmed drive-by threat.

An attacker who has obtained a low-privilege PowerFlex Manager account (or compromised one) sends crafted input through an interface field that feeds a backend SQL query, manipulating the query to return records the account is not authorized to see. Because the scope is changed, the attacker leverages this to read sensitive configuration or credential-adjacent data and achieve unauthorized access to managed resources. No public POC has been identified, and the low attack complexity means exploitation is straightforward once valid credentials are held.