CVE-2025-26483 is an open redirect vulnerability in Dell PowerFlex Manager (Appliance) versions 4.6.2 and prior. An unauthenticated attacker can exploit this flaw to cause application users to be redirected to arbitrary, potentially malicious URLs. This could be used to conduct phishing attacks by tricking users into divulging sensitive information. The vulnerability has a CVSS score of 6.1 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts confidentiality and integrity with no impact on availability. There is no vendor-provided patch or official remediation at this time.

The vulnerability allows attackers to redirect users to untrusted external websites, which can be leveraged for phishing attacks to steal sensitive information. Confidentiality and integrity impacts are rated as low, with no impact on availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious of unexpected redirects originating from Dell PowerFlex Manager interfaces and verify URLs before following links. Monitoring for updates from Dell regarding patches or mitigations is recommended.