CVE-2026-22283
HIGH
7.5
CVSS 3.1
Description
Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Metadata
Severity & Metrics
7.5
HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Dell | PowerFlex | — | 0 < 5.1.0.1 or later, 0 < 4.5.5.2 or later |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-829 | cna | CWE-829: Inclusion of Functionality from Untrusted Control Sphere |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 7.5 | HIGH | 3.1 | cna | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
References (1)