{"id":"CVE-2026-116419","kind":"vulnerability","aliases":["CVE-2026-116419"],"related":[],"title":"Dell PowerScale InsightIQ: sensitive data written to log files","description":"Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 write sensitive information into log files. A low-privileged attacker with remote access could read that data and gain information disclosure.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-powerscale","infrastructure","insightiq","storage"],"not_affected_if":["outside-affected-versions"],"how_to_check":"- Confirm the installed InsightIQ version is within `6.3.0` through `6.4.0`.","fix":null,"status":"open","published_at":"2026-11-13T09:17:32+00:00","first_seen_at":"2026-11-13T09:49:52+00:00","triaged_at":"2026-11-13T09:52:00+00:00","updated_at":"2026-11-13T09:52:00+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-13T09:52:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerScale InsightIQ: sensitive data written to log files","impact":"low","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 write sensitive information into log files. A low-privileged attacker with remote access could read that data and gain information disclosure.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerscale","insightiq","storage"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Low-privileged remote user reads sensitive information from logs","analyst_note":"Check Dell's security advisory for the fixed version and exact log contents; the NVD entry gives no fix or location.","how_to_check":"- Confirm the installed InsightIQ version is within `6.3.0` through `6.4.0`.\n- unknown for other checks; the sources do not say where the logs are or which data is written.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["outside-affected-versions"],"who_is_affected":"Teams running Dell PowerScale InsightIQ in the affected version range are exposed, since a low-privileged remote user can reach the logged data. Installations outside versions 6.3.0 through 6.4.0 are not affected by this entry. The sources do not describe the exact log contents or location.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000714,"input_tokens":4561,"output_tokens":516,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116419':12A,15A '-2026':11A,14A '6.3.0':26B,55C '6.4.0':28B,57C 'access':42B,73C 'attack':39B,70C 'containsan':58C 'could':43B,74C 'cve':10A,13A 'data':5A,46B 'dell':1A,17B,22B,51C 'dell-powerscal':16B 'disclosur':50B,82C 'exploit':76C 'file':9A,34B,65C 'gain':48B 'inform':31B,49B,62C,81C 'infrastructur':19B 'insert':59C 'insightiq':3A,20B,24B,53C 'lead':79C 'log':8A,33B,64C 'low':37B,68C 'low-privileg':36B 'potenti':75C 'powerscal':2A,18B,23B,52C 'privileg':38B,69C 'read':44B 'remot':41B,72C 'sensit':4A,30B,61C 'storag':21B 'version':25B,54C 'vulner':66C,78C 'write':29B 'written':6A","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerScale InsightIQ in the affected version range are exposed, since a low-privileged remote user can reach the logged data. Installations outside versions 6.3.0 through 6.4.0 are not affected by this entry. The sources do not describe the exact log contents or location.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellpowerscale","infrastructure","insightiq","medium","storage"],"campaign_type":null,"search_a":"'-116419':12A,15A '-2026':11A,14A 'cve':10A,13A 'data':5A 'dell':1A 'file':9A 'insightiq':3A 'log':8A 'powerscal':2A 'sensit':4A 'written':6A","search_b":"'6.3.0':26B '6.4.0':28B 'access':42B 'attack':39B 'could':43B 'data':46B 'dell':17B,22B 'dell-powerscal':16B 'disclosur':50B 'file':34B 'gain':48B 'inform':31B,49B 'infrastructur':19B 'insightiq':20B,24B 'log':33B 'low':37B 'low-privileg':36B 'powerscal':18B,23B 'privileg':38B 'read':44B 'remot':41B 'sensit':30B 'storag':21B 'version':25B 'write':29B","search_c":"'6.3.0':55C '6.4.0':57C 'access':73C 'attack':70C 'containsan':58C 'could':74C 'dell':51C 'disclosur':82C 'exploit':76C 'file':65C 'inform':62C,81C 'insert':59C 'insightiq':53C 'lead':79C 'log':64C 'low':68C 'potenti':75C 'powerscal':52C 'privileg':69C 'remot':72C 'sensit':61C 'version':54C 'vulner':66C,78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T09:17:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116419","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116419","severity":null,"published_at":"2026-11-13T09:17:32+00:00","modified_at":"2026-11-13T09:17:32+00:00","first_seen_at":"2026-11-13T09:49:52+00:00","fetched_at":"2026-11-13T09:49:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}