{"id":"CVE-2026-116417","aliases":[],"cve":{"records":[{"id":"CVE-2026-116417","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-26T10:04:27.243Z","published":"2026-11-13T08:52:08.142Z","modified":"2026-11-13T08:52:08.142Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-13T08:52:08.142Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-521","description":"CWE-521: Weak Password Requirements","source":"dell"}],"applicability":[],"prioritization":[]},"title":"Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability.","titleSource":"dell","descriptionSource":"dell","description":"Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","score":8.1,"severity":"high","published":"2026-11-13T08:52:08.142Z","modified":"2026-11-13T08:52:08.142Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"PowerScale InsightIQ","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.4.1 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-116417"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-116417","modified":"2026-11-13T08:52:08.142Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116417"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","score":8.1}],"sourceAffected":[],"observedAt":"2026-11-13T12:41:44.712Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:30:31.194Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-14T09:20:34.938Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-14T09:15:32.191Z","attemptedAt":"2026-11-14T09:15:32.191Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-14T09:05:35.295Z","attemptedAt":"2026-11-14T09:05:35.295Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-14T09:05:35.006Z","attemptedAt":"2026-11-14T09:05:35.006Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-116417","url":"https://www.first.org/epss/","probability":0.00186,"percentile":0.0828,"date":"2026-11-13","checkedAt":"2026-11-14T09:05:35.006Z"},{"source":"ENISA EUVD","id":"EUVD-2026-125140","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125140","modified":"Nov 13, 2026, 8:52:08 AM","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-14T09:05:35.295Z"},{"source":"GitHub Advisory Database","id":"GHSA-39mr-hpmh-g4gx","url":"https://github.com/advisories/GHSA-39mr-hpmh-g4gx","modified":"2026-11-13T09:31:54Z","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-14T09:15:32.191Z"}],"aiSummary":{"text":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 have weak password requirements, potentially allowing an unauthenticated attacker with adjacent network access to disclose information or gain unauthorized access. The vulnerability affects versions before 6.4.1. An attacker needs adjacent network access to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T14:06:10.121Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-116417"}]}}