CVE catalog

CVE-2026-35067

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerab

[CVE catalog]

Severity
Medium · CVSS 5.7CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 25, 2026

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpepowerflex_managerNot reported4.5.5.2fixed
Cpepowerflex_managerNot reported5.1.0.1fixed
Cpepowerflex_managerNot reported5.1.0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpepowerflex_managercpeNot reported4.5.5.2Not reportedNot reportedNot reported
Cpepowerflex_managercpeNot reported5.1.0.1Not reportedNot reportedNot reported
Cpepowerflex_managercpeNot reported5.1.0.1Not reportedNVD-CVE-2026-35067Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References