---
id: "CVE-2026-116417"
page: "https://infrastack.ai/live/CVE-2026-116417"
kind: "vulnerability"
aliases: ["CVE-2026-116417"]
title: "Dell PowerScale InsightIQ: weak password rules let adjacent attackers reach data"
severity: "high"
cvss: 8.1
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "PowerScale InsightIQ", "fixed": ["6.4.1"], "affected": ">= 6.3.0, <= 6.4.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["dell-powerscale", "insightiq", "self-hosted", "storage", "vendor"]
not_affected_if: ["outside-affected-versions"]
published_at: "2026-11-13T09:17:32+00:00"
first_seen_at: "2026-11-13T09:49:52+00:00"
updated_at: "2026-11-13T09:54:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116417", "first_seen_at": "2026-11-13T09:49:52+00:00"}, {"source": "analyst", "url": "https://www.dell.com/support/kbdoc/en-us/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities", "first_seen_at": "2026-11-13T09:54:22+00:00", "cites": ["https://www.dell.com/support/kbdoc/en-us/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities"]}]
exploit_sources: []
---

# Dell PowerScale InsightIQ: weak password rules let adjacent attackers reach data

Link for people: https://infrastack.ai/live/CVE-2026-116417 (this .md is for agents)

Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 enforce weak password requirements. An unauthenticated attacker on the adjacent network could gain unauthorized access and disclose information.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:PowerScale InsightIQ affected >= 6.3.0, <= 6.4.0 fixed 6.4.1

## How to check

Check the installed InsightIQ version; 6.3.0 through 6.4.0 is affected, 6.4.1 or later is fixed. Dell does not name the specific password policy setting, so also review InsightIQ account passwords for weak ones if you cannot upgrade yet.

## Fix

Upgrade PowerScale InsightIQ to 6.4.1 or later (InsightIQ Downloads Area).

## Timeline

- 2026-11-13T09:49:52+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116417
- 2026-11-13T09:54:22+00:00 analyst https://www.dell.com/support/kbdoc/en-us/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities — Dell DSA-2026-480: affected 6.3.0-6.4.0, fixed 6.4.1+. Dell gives no detail on which password rule is weak, no workaround. No exploitation or PoC seen; did not search social.

## Documents

- [advisory] DSA-2026-480: Security Update for Dell PowerScale InsightIQ Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities

## From the sources

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_