{"id":"CVE-2026-116453","kind":"vulnerability","aliases":["CVE-2026-116453"],"related":[],"title":"Dell PowerScale InsightIQ: missing authorization lets low-privilege users tamper with data","description":"Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 do not check authorization properly on some actions. A low-privileged attacker with remote access could read or change information they should not reach.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","insightiq","powerscale","self-hosted"],"not_affected_if":["versions-outside-6.3.0-6.4.0"],"how_to_check":"- Confirm the installed InsightIQ version in the product console or package listing, then compare it to the affected range `6.3.0` through `6.4.0`","fix":null,"status":"open","published_at":"2026-11-13T09:17:33+00:00","first_seen_at":"2026-11-13T09:49:53+00:00","triaged_at":"2026-11-13T09:52:03+00:00","updated_at":"2026-11-13T09:52:03+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T09:52:03Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerScale InsightIQ: missing authorization lets low-privilege users tamper with data","impact":"medium","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 do not check authorization properly on some actions. A low-privileged attacker with remote access could read or change information they should not reach.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","powerscale","insightiq","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged user tampers with information and gains unauthorized access","analyst_note":"Check the Dell security advisory for the fixed InsightIQ version and any workaround; the NVD entry alone gives no fix.","how_to_check":"- Confirm the installed InsightIQ version in the product console or package listing, then compare it to the affected range `6.3.0` through `6.4.0`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["versions-outside-6.3.0-6.4.0"],"who_is_affected":"Organizations running Dell PowerScale InsightIQ in the affected version range, where low-privileged accounts can reach the service remotely. The sources do not say which specific functions are missing checks, so teams should confirm their own exposure. Installations outside the listed versions are not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000722,"input_tokens":4556,"output_tokens":533,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116453':16A,19A '-2026':15A,18A '6.3.0':31B,63C '6.4.0':33B,65C 'access':49B,77C,89C 'action':41B 'attack':46B,74C 'author':5A,37B,69C 'chang':53B 'check':36B 'contain':66C 'could':50B,78C 'cve':14A,17A 'data':13A 'dell':1A,20B,27B,59C 'exploit':80C 'host':26B 'inform':54B,85C 'infrastructur':21B 'insightiq':3A,22B,29B,61C 'lead':83C 'let':6A 'low':8A,44B,72C 'low-privileg':7A,43B 'miss':4A,68C 'potenti':79C 'powerscal':2A,23B,28B,60C 'privileg':9A,45B,73C 'proper':38B 'reach':58B 'read':51B 'remot':48B,76C 'self':25B 'self-host':24B 'tamper':11A,86C 'unauthor':88C 'user':10A 'version':30B,62C 'vulner':70C,82C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerScale InsightIQ in the affected version range, where low-privileged accounts can reach the service remotely. The sources do not say which specific functions are missing checks, so teams should confirm their own exposure. Installations outside the listed versions are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","infrastructure","insightiq","medium","powerscale","selfhosted"],"campaign_type":null,"search_a":"'-116453':16A,19A '-2026':15A,18A 'author':5A 'cve':14A,17A 'data':13A 'dell':1A 'insightiq':3A 'let':6A 'low':8A 'low-privileg':7A 'miss':4A 'powerscal':2A 'privileg':9A 'tamper':11A 'user':10A","search_b":"'6.3.0':31B '6.4.0':33B 'access':49B 'action':41B 'attack':46B 'author':37B 'chang':53B 'check':36B 'could':50B 'dell':20B,27B 'host':26B 'inform':54B 'infrastructur':21B 'insightiq':22B,29B 'low':44B 'low-privileg':43B 'powerscal':23B,28B 'privileg':45B 'proper':38B 'reach':58B 'read':51B 'remot':48B 'self':25B 'self-host':24B 'version':30B","search_c":"'6.3.0':63C '6.4.0':65C 'access':77C,89C 'attack':74C 'author':69C 'contain':66C 'could':78C 'dell':59C 'exploit':80C 'inform':85C 'insightiq':61C 'lead':83C 'low':72C 'miss':68C 'potenti':79C 'powerscal':60C 'privileg':73C 'remot':76C 'tamper':86C 'unauthor':88C 'version':62C 'vulner':70C,82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T09:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116453","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116453","severity":null,"published_at":"2026-11-13T09:17:33+00:00","modified_at":"2026-11-13T09:17:33+00:00","first_seen_at":"2026-11-13T09:49:53+00:00","fetched_at":"2026-11-13T09:49:53+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}