SQL Injection Vulnerability in Dell PowerScale InsightIQ Affects Multiple Versions
CVE-2026-94348

6.1MEDIUM

Key Information:

Vendor

Dell
Status
Powerscale Insightiq
Vendor
CVE Published:
14 October 2026

What is CVE-2026-94348?

Dell's PowerScale InsightIQ has a vulnerability characterized as improper neutralization of special elements used in SQL commands. This issue affects versions 5.2.0 through 6.3.0, allowing attackers with limited local access to potentially exploit the vulnerability. Successful exploitation could lead to a Denial of Service state within the application, disrupting essential functionality and impacting service availability.

Affected Version(s)

PowerScale InsightIQ 0 < 6.4.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000518964/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.