EUVD-2026-29472
GHSA-pfg9-wgjh-92j7
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
AnalysisAI
Local privilege escalation in Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0 allows high-privileged attackers to execute code with unnecessary elevated privileges, potentially escalating to full system compromise. The vulnerability requires existing local access and high privilege level on the affected system; no public exploit has been identified at time of analysis.
Technical ContextAI
Dell PowerScale InsightIQ is a monitoring and analytics platform for Dell PowerScale storage systems. The vulnerability stems from CWE-250 (Execution with Unnecessary Privileges), a design flaw where application components or processes run with more privileged access than functionally required. This typically occurs when the application does not properly implement privilege separation or drops privileges after initialization. In the context of InsightIQ, this allows a high-privileged local user (such as a system administrator or service account) to leverage unnecessary elevated permissions to escalate their access beyond intended boundaries, potentially executing arbitrary code in a higher-privilege context.
RemediationAI
Consult Dell security advisory DSA-2026-208 for vendor-released patch and exact fixed versions. The primary remediation is to upgrade Dell PowerScale InsightIQ to the patched version specified in the advisory. As an interim mitigation prior to patching, implement strict access controls limiting high-privilege account usage to only necessary personnel and critical operations; audit and restrict local system access to known administrators; and monitor privilege escalation attempts through system logging (monitor for unexpected privilege elevation events, unauthorized sudo/su usage, or suspicious process execution with elevated privileges). Note that these mitigations do not eliminate the vulnerability but reduce the likelihood of exploitation by minimizing the number of high-privilege accounts and visibility to suspicious activity. Apply patches as soon as possible after vendor testing in your environment.
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute
Dell RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contains hardcoded credentials (CVE-2026-22769, CVSS 10.0) t
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance vers
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('
Same weakness CWE-250 – Execution with Unnecessary Privileges
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today