CVE-2026-35065: Dell Powerflex Manager

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.

Affected products

• Dell Powerflex Manager: before 4.5.5.2 (fixed in 4.5.5.2); from 4.6.0, before 5.1.0.1 (fixed in 5.1.0.1)

Published 2026-06-17. Last modified 2026-06-25.