CVE-2026-49502 is an improper authentication vulnerability in Dell PowerFlex Manager. An unauthenticated attacker with adjacent network access could exploit this flaw to gain unauthorized access and cause information disclosure. The CVSS 3.1 base score is 7.4, reflecting a high severity with attack vector limited to adjacent network, low attack complexity, no privileges required, and no user interaction needed. The impact includes high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently available, and no known exploits have been reported in the wild.

Successful exploitation could lead to unauthorized access and information disclosure within the affected Dell PowerFlex Manager environment. Integrity and availability are not impacted according to the CVSS vector. The attack requires adjacent network access but no authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict adjacent network access to the Dell PowerFlex Manager interface and monitor for suspicious activity related to authentication attempts.