Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

25 records in Powerflex Manager · all components

TI-2024-24670 CVE-2024-37143 · GHSA-pcpf-v6jv-rq33

Link following in Dell PowerFlex appliance

Priority MEDIUM 50

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00762 Published 2024-12-10 Fixed in 46.381.00, 46.376.00 +5 CWE-59
TI-2026-40869 CVE-2026-56688 · GHSA-r5h9-5m8h-hw64

OS command injection in Dell PowerFlex Manager

Priority MEDIUM 45

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02003 Published 2026-07-10 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-78
TI-2026-27266 CVE-2026-35065 · GHSA-wfcw-3pw3-83c9

Missing authentication in Dell PowerFlex

Priority MEDIUM 40

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00353 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-306
TI-2026-40871 CVE-2026-56690 · GHSA-cmv5-wf6c-fjcg

SQL injection in Dell PowerFlex Manager

Priority LOW 37

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00323 Published 2026-07-10 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-89
TI-2024-24671 CVE-2024-37144 · GHSA-8qpv-g9xr-qm6v

Insecure storage of sensitive information in Dell PowerFlex appliance

Priority LOW 37

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node…

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00169 Published 2024-12-10 Fixed in 46.381.00, 46.376.00 +5 CWE-922
TI-2026-36652 CVE-2026-49502 · GHSA-jw62-xc2q-92gm

Improper authentication in Dell PowerFlex

Priority LOW 35

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.0021 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-287
TI-2026-25274 CVE-2026-32804 · GHSA-x876-ccxc-p3gm

Improper authentication in Dell PowerFlex

Priority LOW 35

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00228 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-287
TI-2025-19430 CVE-2025-26483 · GHSA-883q-9j5h-3x3g

Open redirect in Dell PowerFlex Manager

Priority LOW 35

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00173 Published 2026-05-22 Fixed in IC 48.378.00, IC 48.383.00 +2 CWE-601
TI-2026-40870 CVE-2026-56689 · GHSA-w262-hpqj-c8r8

SQL injection in Dell PowerFlex Manager

Priority LOW 34

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00373 Published 2026-07-10 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-89
TI-2026-27270 CVE-2026-35069 · GHSA-7rvr-jr77-2v6x

SQL injection in Dell PowerFlex

Priority LOW 34

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00229 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-89
TI-2026-27268 CVE-2026-35067 · GHSA-gj8w-5c5c-88w9

Improper access control in Dell PowerFlex

Priority LOW 34

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0015 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-284
TI-2024-31778 CVE-2024-47477 · GHSA-prrp-66v5-646p

Improper certificate validation in Dell PowerFlex Manager

Priority LOW 34

Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00124 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-295
TI-2025-23804 CVE-2025-32749 · GHSA-xprc-xvh6-w68r

Incorrect default permissions in Dell PowerFlex Manager

Priority LOW 32

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00127 Published 2026-05-22 Fixed in IC 48.378.00, IC 48.383.00 +2 CWE-276
TI-2026-27267 CVE-2026-35066 · GHSA-9c27-m28q-hqr5

Improper access control in Dell PowerFlex

Priority LOW 30

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00183 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-284
TI-2025-24905 CVE-2025-36599 · GHSA-7x6j-p2wp-qwwf

Sensitive information in log files in Dell PowerFlex Manager VM

Priority LOW 29

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00286 Published 2025-07-09 Fixed in 4.6.2.1 CWE-532
TI-2026-27316 CVE-2026-35162 · GHSA-69wr-f7cj-796x

Improper access control in Dell PowerFlex

Priority LOW 28

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0021 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-284
TI-2025-23800 CVE-2025-32745 · GHSA-w3w5-rfwv-898q

Improper certificate validation in Dell PowerFlex Manager

Priority LOW 27

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00083 Published 2026-05-22 Fixed in IC 48.378.00, IC 48.383.00 +2 CWE-295
TI-2026-27269 CVE-2026-35068 · GHSA-q7j8-gmpq-hc8j

SQL injection in Dell PowerFlex

Priority LOW 25

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00192 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-89
TI-2025-29106 CVE-2025-46371 · GHSA-6cvj-w99f-98mh

Broken or risky cryptographic algorithm in Dell PowerFlex Manager

Priority LOW 23

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00067 Published 2026-05-22 Fixed in IC 48.378.00, IC 48.383.00 +2 CWE-327
TI-2026-29365 CVE-2026-40641 · GHSA-h4p6-c3xj-992m

Broken or risky cryptographic algorithm in Dell PowerFlex

Priority LOW 21

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.001 Published 2026-06-17 Fixed in 5.1.0.1 or later, 4.5.5.2 or later CWE-327
Open these records in search →