CVE-2026-116453: Medium severity vulnerability
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs remote access to the affected InsightIQ instance and low-privileged credentials. No user interaction is required.
Which deployments are affected?
Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 are affected. The provided information does not state whether any particular default configuration is required.
What is the potential impact?
Successful exploitation could allow information tampering and unauthorized access. The reported CVSS vector indicates low impact to integrity and availability, with no reported confidentiality impact.