CVE-2026-35161
MediumCVSS 5.3Summary
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Risk Assessment
An unauthenticated remote attacker could trigger account lockouts, causing denial of service for legitimate Dell PowerScale InsightIQ users. This may prevent administrators from accessing the monitoring system.
Recommendation
Update Dell PowerScale InsightIQ to a patched version outside the 5.2.0–6.3.0 range. Consider adjusting account lockout thresholds and implementing brute-force protection mechanisms.
Other vulnerabilities in Dell PowerScale InsightIQ
See all- CVE-2026-94348Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-35071High
Dell PowerScale InsightIQ versions 6.0.0 through 6.2.0 contains an OS Command Injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this vulnerability to execute commands.
Original NVD description (English source)
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS