Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-116420

Quick assessment

Affected

Dell PowerScale InsightIQ

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dell PowerScale InsightIQ 6.3.0 至 6.4.0 版本存在“向日志文件插入敏感信息”漏洞。拥有远程访问权限的低权限攻击者可能利用此漏洞，导致信息泄露。

CVSS 6.4 · Medium EPSS 0.18% · P8 Updated Nov 15, 2026

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1552.001 · Credentials In Files

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Dell	PowerScale InsightIQ	`< 6.4.1 or later`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

通过日志文件的信息暴露

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Dell	PowerScale InsightIQ	0 ~ 6.4.1 or later	-

II. Public POCs for CVE-2026-116420

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116420

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-116420 (1)

DSA-2026-480: Security Update for Dell PowerScale InsightIQ Multiple Vulnerabilities | Dell United Kingdom vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-116420

Same Patch Batch · Dell · 2026-11-13 · 38 CVEs total

CVE-2026-103813	9.1 CRITICAL	Dell PowerStore OS命令注入致提权
CVE-2026-111545	8.8 HIGH	Dell PowerStore SQL注入漏洞致密钥泄露
CVE-2026-107524	8.8 HIGH	Dell PowerStore整数溢出致越界访问
CVE-2026-116411	8.8 HIGH	Dell PowerStore SSRF 漏洞
CVE-2026-86356	8.8 HIGH	Dell PowerStore 权限绕过致管理员提权
CVE-2026-107523	8.7 HIGH	Dell PowerStore整数溢出致数据销毁或拒绝服务
CVE-2026-86355	8.3 HIGH	Dell PowerStore外部文件控制致提权漏洞
CVE-2026-111547	8.1 HIGH	Dell PowerStore越界读取致拒绝服务漏洞
CVE-2026-116417	8.1 HIGH	Dell InsightIQ 6.3-6.4弱口令漏洞
CVE-2026-116418	7.5 HIGH	Dell PowerScale InsightIQ 6.3-6.4 权限提升漏洞
CVE-2026-61418	7.5 HIGH	Dell SmartFabric OS10<10.6.0.10授权缺陷致RCE
CVE-2026-107522	7.2 HIGH	Dell PowerStore 未授权访问致提权漏洞
CVE-2026-82177	7.2 HIGH	Dell PowerStore 操作系统命令注入漏洞
CVE-2026-116413	7.1 HIGH	Dell PowerStore 密码学缺陷致身份冒用
CVE-2026-61417	6.5 MEDIUM	Dell SmartFabric OS10<10.6.0.10 访问控制缺陷致DoS
CVE-2026-116421	6.4 MEDIUM	Dell InsightIQ 6.3-6.4日志敏感信息泄露漏洞
CVE-2026-116419	6.4 MEDIUM	Dell InsightIQ 6.3-6.4日志泄露漏洞
CVE-2026-116422	6.3 MEDIUM	Dell InsightIQ 6.3-6.4日志敏感信息泄露
CVE-2026-116412	5.5 MEDIUM	Dell PowerStore不安全文件权限致凭据泄露
CVE-2026-116424	5.4 MEDIUM	Dell PowerScale InsightIQ 6.3-6.4未授权访问

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: PowerScale InsightIQ

Same vendor: Dell

Same weakness: CWE-532