CVE-2026-56688: powerflex manager from 4.5.5 (inclusive), before 4.5.5.2 (exclusive), from 5.1.0 (inclusive), before 5.1.0.1…

Affected technology

powerflex manager · from 4.5.5 (inclusive), before 4.5.5.2 (exclusive)
dell

powerflex manager · from 5.1.0 (inclusive), before 5.1.0.1 (exclusive)
dell

PowerFlex Manager · 0 to before 5.1.0.1 or later, 0 to before 4.5.5.2 or later
Dell

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

A high privileged attacker with remote access could potentially exploit this vulnerability during OS Repository processing to achieve arbitrary command execution as root, potentially leading to full appliance compromise and lateral movement into managed infrastructure. Vendor/CNA’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality, integrity and availability impact as high.