CVE-2026-35161

Awaiting Analysis Awaiting Analysis - Queue

Overly Restrictive Account Lockout in Dell PowerScale InsightIQ

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Dell

Description

Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-35161

EUVD

EUVD-2026-101033

Affected Vendors & Products

Vendor	Product	Version / Range
Dell	PowerScale	InsightIQ 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-645	The product contains an account lockout protection mechanism, but the mechanism is too restrictive and can be triggered too easily, which allows attackers to deny service to legitimate users by causing their accounts to be locked out.

Attack-Flow Graph

Executive Summary

Dell PowerScale InsightIQ versions 5.2.0 through 6.3.0 have an overly restrictive account lockout mechanism. This flaw allows an unauthenticated remote attacker to trigger a denial of service by exploiting the lockout feature.

Detection Guidance

To detect this vulnerability, monitor for repeated failed authentication attempts targeting Dell PowerScale InsightIQ services. Check logs for account lockouts or service disruptions in versions 5.2.0 through 6.3.0. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to disrupt access to Dell PowerScale InsightIQ services, causing downtime or preventing legitimate users from accessing the system.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling denial of service attacks, which may disrupt critical data processing or healthcare operations. Unauthorized disruptions could lead to violations of availability requirements under these regulations.

Mitigation Strategies

Update Dell PowerScale InsightIQ to a version beyond 6.3.0 to address the overly restrictive account lockout mechanism vulnerability.

Hi! I’m here to help you understand CVE-2026-35161. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70