CVE-2026-35071
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Dell PowerScale InsightIQ versions 6.0.0 through 6.2.0 contains an OS Command Injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this vulnerability to execute commands.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows an attacker to remotely execute commands on the system, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update Dell PowerScale InsightIQ to the latest version to mitigate this vulnerability and to restrict local access to the system to trusted users only.
Other vulnerabilities in Dell PowerScale InsightIQ
See all- CVE-2026-35161Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-94348Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-40638Medium
Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0 contain an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this to elevate privileges.
Original NVD description (English source)
Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS