CVE-2026-22283 affects Dell PowerFlex Manager versions before 4.8 and involves the inclusion of functionality from an untrusted control sphere, which can be exploited remotely without authentication. Successful exploitation could lead to information disclosure. The vulnerability is rated high severity with a CVSS 3.1 score of 7.5, indicating network attack vector, high attack complexity, no privileges required, and user interaction required. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An unauthenticated remote attacker could exploit this vulnerability to disclose sensitive information from affected Dell PowerFlex Manager systems. The impact includes confidentiality, integrity, and availability concerns as indicated by the CVSS vector, but the primary documented impact is information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to Dell PowerFlex Manager instances and monitor for unusual activity. Follow Dell's security advisories for updates on patches or mitigations.