3.5
Low
CVE-2026-35068 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
Description
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerFlex | Versions not published |
Other CVEs of PowerFlex
The 11 CVEs of PowerFlex →
CVE-2026-35069
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in…
5.7
Medium
CVE-2026-35066
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
7.1
High
CVE-2026-35067
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
5.7
Medium
CVE-2026-35162
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability
4.3
Medium