CVE-2026-116433 · Vendor
NO FIX YET
Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 lack an authorization check in part of their functionality. A low-privileged attacker with remote access could reach data or actions they should not be allowed to use.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running Dell PowerScale InsightIQ in the affected version range, where low-privileged accounts can reach the service remotely. The sources do not describe which specific functions are involved or what default configuration applies.
Not affected if unknown
Who cares dell-powerscale, insightiq, self-hosted
6.3.0 through 6.4.0.No fix yet, per the sources.
Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.