CVE-2026-22283 affects Dell PowerFlex Manager versions before 4.8 and involves the inclusion of functionality from an untrusted control sphere, which may be exploited remotely without authentication. Successful exploitation could lead to information disclosure. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.5, indicating network attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. No official patch or remediation level has been published by Dell as of the current data.

An unauthenticated remote attacker could exploit this vulnerability to disclose sensitive information from the affected Dell PowerFlex Manager system. The CVSS vector indicates potential impacts to confidentiality, integrity, and availability, but the primary described impact is information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor Dell's advisories for updates. Until a patch is available, restrict remote access to the affected systems and apply network-level controls to limit exposure.