CVE-2026-94348
MediumCVSS 6.1Summary
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.
Risk Assessment
A low privileged attacker with local access could cause denial of service in Dell PowerScale InsightIQ. This may disrupt monitoring and management of PowerScale infrastructure.
Recommendation
Update Dell PowerScale InsightIQ to a patched version outside the 5.2.0–6.3.0 range. Restrict local access to the system to trusted users.
Other vulnerabilities in Dell PowerScale InsightIQ
See all- CVE-2026-35161Medium
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-35071High
Dell PowerScale InsightIQ versions 6.0.0 through 6.2.0 contains an OS Command Injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this vulnerability to execute commands.
Original NVD description (English source)
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS