{"id":"CVE-2026-116422","kind":"vulnerability","aliases":["CVE-2026-116422"],"related":[],"title":"Dell PowerScale InsightIQ: logs leak sensitive data to low-privilege users","description":"Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 write sensitive information into log files. A low-privileged attacker with remote access could read that information.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","insightiq","powerscale","self-hosted"],"not_affected_if":["version-outside-6.3.0-6.4.0"],"how_to_check":"- Confirm the installed InsightIQ version is between `6.3.0` and `6.4.0`\n- Review the InsightIQ log files for stored sensitive values, if the team has access to them","fix":null,"status":"open","published_at":"2026-11-13T09:17:32+00:00","first_seen_at":"2026-11-13T09:49:52+00:00","triaged_at":"2026-11-13T09:52:03+00:00","updated_at":"2026-11-13T09:52:03+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-13T09:52:03Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerScale InsightIQ: logs leak sensitive data to low-privilege users","impact":"low","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 write sensitive information into log files. A low-privileged attacker with remote access could read that information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","powerscale","insightiq","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged remote user reads sensitive information from logs","analyst_note":"Check the Dell security advisory for the fixed InsightIQ version and the exact type of sensitive data logged.","how_to_check":"- Confirm the installed InsightIQ version is between `6.3.0` and `6.4.0`\n- Review the InsightIQ log files for stored sensitive values, if the team has access to them","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-6.3.0-6.4.0"],"who_is_affected":"Organizations running Dell PowerScale InsightIQ in the 6.3.0 to 6.4.0 range. The sources do not say which configurations or log settings are required for the logged data to be exposed, so the exposure scope is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000711,"input_tokens":4566,"output_tokens":508,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116422':15A,18A '-2026':14A,17A '6.3.0':30B,55C '6.4.0':32B,57C 'access':46B,74C 'attack':43B,71C 'contain':58C 'could':47B,75C 'cve':13A,16A 'data':7A 'dell':1A,19B,26B,51C 'disclosur':83C 'exploit':77C 'exposur':86C 'file':38B,66C 'host':25B 'inform':35B,50B,63C,82C,85C 'infrastructur':20B 'insert':60C 'insightiq':3A,21B,28B,53C 'lead':80C 'leak':5A 'log':4A,37B,65C 'low':10A,41B,69C 'low-privileg':9A,40B 'potenti':76C 'powerscal':2A,22B,27B,52C 'privileg':11A,42B,70C 'read':48B 'remot':45B,73C 'self':24B 'self-host':23B 'sensit':6A,34B,62C 'user':12A 'version':29B,54C 'vulner':67C,79C 'write':33B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerScale InsightIQ in the 6.3.0 to 6.4.0 range. The sources do not say which configurations or log settings are required for the logged data to be exposed, so the exposure scope is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","infrastructure","insightiq","medium","powerscale","selfhosted"],"campaign_type":null,"search_a":"'-116422':15A,18A '-2026':14A,17A 'cve':13A,16A 'data':7A 'dell':1A 'insightiq':3A 'leak':5A 'log':4A 'low':10A 'low-privileg':9A 'powerscal':2A 'privileg':11A 'sensit':6A 'user':12A","search_b":"'6.3.0':30B '6.4.0':32B 'access':46B 'attack':43B 'could':47B 'dell':19B,26B 'file':38B 'host':25B 'inform':35B,50B 'infrastructur':20B 'insightiq':21B,28B 'log':37B 'low':41B 'low-privileg':40B 'powerscal':22B,27B 'privileg':42B 'read':48B 'remot':45B 'self':24B 'self-host':23B 'sensit':34B 'version':29B 'write':33B","search_c":"'6.3.0':55C '6.4.0':57C 'access':74C 'attack':71C 'contain':58C 'could':75C 'dell':51C 'disclosur':83C 'exploit':77C 'exposur':86C 'file':66C 'inform':63C,82C,85C 'insert':60C 'insightiq':53C 'lead':80C 'log':65C 'low':69C 'potenti':76C 'powerscal':52C 'privileg':70C 'remot':73C 'sensit':62C 'version':54C 'vulner':67C,79C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T09:17:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116422","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116422","severity":null,"published_at":"2026-11-13T09:17:32+00:00","modified_at":"2026-11-13T09:17:32+00:00","first_seen_at":"2026-11-13T09:49:52+00:00","fetched_at":"2026-11-13T09:49:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}