Skip to content
ThreatCluster

Dell PowerFlex Security Updates Address Multiple Vulnerabilities

First seen 23 May 2026, 01:24 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 24, 2026 at 00:34 UTC
  • •Dell released two security updates for PowerFlex systems on May 23, 2026.
  • •The updates address multiple CVEs, including critical vulnerabilities in third-party components.
  • •Affected systems include Dell PowerEdge servers, iDRAC, and VMware products.

Dell has released two security updates (DSA-2025-434 and DSA-2025-435) addressing multiple vulnerabilities in PowerFlex Rack and Appliance systems. The updates cover numerous CVEs, including critical vulnerabilities in third-party components affecting Dell PowerEdge servers, iDRAC, and VMware products. Notable CVEs include CVE-2025-41225, CVE-2025-20191, and CVE-2025-26482, which have been published recently and may pose significant risks if exploited. The updates are crucial for maintaining the security of affected systems, as they include patches for vulnerabilities with known exploitations. Users are urged to apply these updates promptly to mitigate potential threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 137d ago How this analysis works

Timeline

2019-04-13
Public exploit for CVE-2025-49844 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2021-01-11
CVE-2021-3121 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2021-04-21
CVE-2021-28965 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2021-04-29
CVE-2020-36327 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2021-12-17
CVE-2021-41495 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2022-03-18
CVE-2022-27191 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2022-08-09
CVE-2022-30632 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2022-12-22
CVE-2022-40899 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2023-05-26
CVE-2023-32681 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2023-12-10
CVE-2023-5869 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track CVE-2020-22916 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (162)

1 / 2