CVE-2026-40638
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0 contain an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this to elevate privileges.
Risk Assessment
An attacker with local access and high privileges may escalate privileges, potentially leading to further system compromise.
Recommendation
Update Dell PowerScale InsightIQ to a fixed version or restrict local access to trusted administrators.
Other vulnerabilities in Dell PowerScale InsightIQ
See all- CVE-2026-35161Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-94348Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-35071High
Dell PowerScale InsightIQ versions 6.0.0 through 6.2.0 contains an OS Command Injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this vulnerability to execute commands.
Original NVD description (English source)
Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS