CVE-2026-35069 describes an SQL Injection vulnerability in Dell PowerFlex Manager versions before 5.1.0.1. The flaw involves improper neutralization of special elements in SQL commands, enabling an attacker with low privileges and adjacent network access to inject malicious scripts. The vulnerability does not require user interaction and impacts confidentiality but not integrity or availability. No known exploits are reported in the wild, and no official remediation or patch has been documented yet.

An attacker with low privileges and adjacent network access could exploit this vulnerability to perform SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive information (confidentiality impact). There is no indication of impact on integrity or availability. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict adjacent network access to the affected Dell PowerFlex Manager instances and monitor for unusual activity related to SQL injection attempts.