{"id":"CVE-2026-35161","state":"PUBLISHED","title":"Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access coul","description":"Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.","publishedAt":"2026-10-14T14:09:58.302Z","updatedAt":"2026-10-14T16:07:19.008Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"dell"},"assigner":"dell","products":["Dell PowerScale InsightIQ"],"affected":[{"vendor":"Dell","product":"PowerScale InsightIQ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.4.0 or later","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000518964/dsa-2026-439-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities"],"weaknesses":["CWE-645"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/35xxx/CVE-2026-35161.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-35161","state":"PUBLISHED","datePublished":"2026-10-14T14:09:58.302Z","dateUpdated":"2026-10-14T16:07:19.008Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-04-01T17:04:27.475Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service."}],"affected":[{"vendor":"Dell","product":"PowerScale InsightIQ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.4.0 or later","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000518964/dsa-2026-439-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-645","lang":"en","description":"CWE-645: Overly Restrictive Account Lockout Mechanism","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-10-14T14:09:58.302Z"},"datePublic":"2026-10-09T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-14T16:06:54.892659Z","id":"CVE-2026-35161","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-14T16:07:19.008Z"}}]}}}