Dell Releases Security Updates for PowerScale InsightIQ

Affected Environment

Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0 deployed on enterprise storage monitoring environments.

Threat Overview

Two CVEs: OS command injection (CVSS 8.2) in versions 6.0.0–6.2.0 and unnecessary privilege execution (CVSS 6.7) in versions 5.0.0–6.2.0.

Exposure Timeline

Disclosed 12 May 2026; no active exploitation reported; classified as Informative Cyber Alert with auto-update available.

Attack Surface

Local access interfaces on InsightIQ systems; requires high-privileged local attacker account to exploit either vulnerability.

Technical Root Cause

Improper neutralisation of special elements in OS commands and execution with unnecessarily elevated privileges in the application agent.

Exploitation Pathway

High-privileged local attacker submits crafted input to trigger command injection or abuses elevated process execution for privilege escalation.