CVE-2026-49502 is an improper authentication vulnerability in Dell PowerFlex Manager versions before 5.1.0.1. It enables an unauthenticated attacker with adjacent network access to bypass authentication controls, potentially leading to information disclosure, tampering, and unauthorized access. The CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) reflects that the attack requires adjacent network access, has low attack complexity, no privileges or user interaction needed, and can cause a high impact on confidentiality with scope changed. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could allow an unauthenticated attacker on an adjacent network to bypass authentication mechanisms, resulting in high confidentiality impact through information disclosure. Integrity could also be affected through information tampering, and unauthorized access to the system is possible. Availability impact is not indicated. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict adjacent network access to the affected PowerFlex Manager instances and monitor for suspicious activity related to authentication bypass attempts.