8.2
High
CVE-2026-35071 Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in…
Description
Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerScale InsightIQ | Versions not published |
Other CVEs of PowerScale InsightIQ
The 11 CVEs of PowerScale InsightIQ →
CVE-2026-35161
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism…
5.3
Medium
CVE-2026-94348
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in…
6.1
Medium
CVE-2026-40638
Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability
6.7
Medium
CVE-2025-30476
Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability
5.3
Medium