Home / Vulnerability Intelligence / CVE-2026-35071

CVE-2026-35071 - Vulnerability Analysis

HighCVSS: 8.2

Last Updated: May 12, 2026

Dell PowerScale InsightIQ - OS Command Injection

Published: May 12, 2026Updated: May 12, 2026

Overview

Dell PowerScale InsightIQ 6.0.0 through 6.2.0 contains an OS command injection caused by improper neutralization of special elements, letting high privileged local attackers execute arbitrary commands.

Severity & Score

Severity: High

CVSS Score: 8.2

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

High privileged local attackers can execute arbitrary OS commands, potentially compromising the system.

Mitigation

Update to a version later than 6.2.0 or the latest available version.

References

https://www.dell.com/support/kbdoc/en-us/000463695/dsa-2026-208-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

May 12, 2026

🟠 CVE-2026-35071 - High (8.2) Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit t... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35071/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

May 12, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-35071
Severity: High
CVSS Score: 8.2
Type: command_injection
Status: confirmed
EPSS: 0.0%
Social Posts: 2

CWE

CWE-78

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days