CVE-2026-94348: SQL Injection
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs local access to the affected InsightIQ system and only low-level privileges. Remote-only attackers are not described as able to exploit it.
Which deployments are affected?
Dell PowerScale InsightIQ versions 5.2.0 through 6.3.0 are affected. The provided information does not state whether any particular configuration is required or whether default configurations are affected.
What is the expected impact?
Successful exploitation could cause a denial of service. The supplied severity vector indicates availability impact is high, integrity impact is low, and confidentiality impact is not indicated.