🚨High - Dell PowerFlex Manager Improper Authentication Unauthorized Access (CVE-2026-32804) Dell PowerFlex Manager contains an Improper Authentication vulnerability (CWE-287) that allows an unauthenticated attacker on the adjacent network to bypass authentication entirely - no credentials, no user interaction required. Successful exploitation gives the attacker high-impact write access to the system and can cause denial of service. The attack vector is adjacent network (AV:A), meaning the attacker must be on the same network segment or VLAN - reducing but not eliminating real-world risk in enterprise environments where PowerFlex is commonly deployed. 👉Upgrade to PowerFlex Software 5.1.0.1 or later (4.x branch: 4.5.5.2 or later).
Post summary
A newly disclosed authentication flaw in Dell PowerFlex Manager (CVE-2026-32804) allows unauthenticated attackers on the same network to gain full write access and cause service disruption, and Dell recommends upgrading to specified software versions to mitigate the risk.