CVE-2026-40638 — Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0,

title: Privilege Escalation via Dell PowerScale InsightIQ Unnecessary Privileges — CVE-2026-40638
id: scw-2026-05-12-ai-1
status: experimental
level: high
description: |
  Detects the execution of the InsightIQ CLI with administrative privileges, which is a potential indicator of exploitation for CVE-2026-40638. This vulnerability allows a local attacker with high privileges to escalate their privileges by exploiting unnecessary privileges within the InsightIQ application.
author: SCW Feed Engine (AI-generated)
date: 2026-05-12
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-40638/
tags:
  - attack.privilege_escalation
  - attack.t1068
logsource:
    category: process_creation
detection:
  selection:
      Image|startswith:
          - 'C:\Program Files\Dell\InsightIQ\server\python\bin\python.exe'
      CommandLine|contains:
          - 'insightiq-cli'
          - 'admin'
          - 'shell'
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse