{"id":"CVE-2026-49502","aliases":["EUVD-2026-37729","GHSA-jw62-xc2q-92gm"],"status":"published","title":"Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...","description":"Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0021,"percentile":0.11208,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2026-06-17T14:30:27Z","modified":"2026-10-26T12:10:00Z","products":[{"vendor":"dell","product":"powerflex"},{"vendor":"dell","product":"powerflex_manager"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49502"},{"url":"https://github.com/advisories/GHSA-jw62-xc2q-92gm"}],"sources":{"cve":[{"id":"CVE-2026-49502","description":"Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.","status":"published","published":"2026-06-17T14:30:27.31Z","modified":"2026-06-25T12:59:48.815Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T13:34:59.78118Z"}],"euvd":[{"id":"EUVD-2026-37729","description":"Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.","status":"published","published":"2026-06-17T14:30:27Z","modified":"2026-06-25T12:59:48Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:29.213001Z"}],"ghsa":[{"id":"GHSA-jw62-xc2q-92gm","title":"Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...","description":"Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.","status":"published","published":"2026-06-17T18:35:56Z","modified":"2026-06-17T18:36:07Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:08:52.922102Z"}],"nvd":[{"id":"CVE-2026-49502","description":"Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.","status":"published","published":"2026-06-17T15:16:59.85Z","modified":"2026-10-26T12:10:00.13Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:12:24.544761Z"}]}}