CVE-2026-35071: OS Command Injection
Published May 12, 2026
·Updated
Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
2 affected components
Dell PowerScale InsightIQ>=6.0.0<=6.2.0
Dell InsightIQ>=6.0.0<6.3.0
Event History
May 12, 2026
CVE Published
via MITRE·01:25 PM
Data Sourced
via MITRE·01:25 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-35071?
CVE-2026-35071 is classified as a high severity OS command injection vulnerability.
2
How do I fix CVE-2026-35071?
To fix CVE-2026-35071, upgrade Dell PowerScale InsightIQ to a version later than 6.2.0.
3
Who can exploit CVE-2026-35071?
CVE-2026-35071 can be exploited by a high privileged attacker with local access to the system.
4
What type of vulnerability is CVE-2026-35071?
CVE-2026-35071 is an OS command injection vulnerability.
5
Which versions of Dell PowerScale InsightIQ are affected by CVE-2026-35071?
CVE-2026-35071 affects Dell PowerScale InsightIQ versions from 6.0.0 through 6.2.0.