CVE-2026-40641 - Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability

Back Back to CVE browser

MEDIUM

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability

Published Jun 17, 2026

4.8

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Affected products

Vendor Dell Product PowerFlex Default
unaffected
Affected
- ≥ 0, < 4.5.5.2 or later
- ≥ 0, < 5.1.0.1 or later

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Dell	PowerFlex	unaffected	Affected ≥ 0, < 4.5.5.2 or later ≥ 0, < 5.1.0.1 or later

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37724
Advisory
https://www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37724		Advisory
https://www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Jun 17, 2026

Updated Jun 25, 2026

Reserved Apr 14, 2026

Link CVE-2026-40641

CISA Vulnrichment

Updated Jun 17, 2026

NVD

Status Modified

Modified Jun 25, 2026

Link CVE-2026-40641

Red Hat

No data

ENISA EUVD

Assigner dell

Published Jun 17, 2026

Updated Jun 25, 2026

Link EUVD-2026-37724

GitHub

No data