CVE-2026-40641

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 60/100
Published: 2026-06-17 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: None

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
dell powerflex_manager < 4.5.5.2

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

4.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

0.10%
Raw Score 0.001000
Percentile 0.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00100
2026-10-28
0.00100

Intelligence Sources

nvd ref →