CVE-2026-40638 is an execution with unnecessary privileges vulnerability in Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0. It allows a local attacker who already has high privileges to potentially elevate their privileges further by exploiting the unnecessary privilege execution flaw. The vulnerability is categorized under CWE-250 and has a CVSS 3.1 base score of 6.7, reflecting medium severity with high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Dell as of the publication date.

A high privileged local attacker could exploit this vulnerability to gain elevated privileges beyond their current level, potentially compromising confidentiality, integrity, and availability of the affected system. Since the attacker must already have high privileges and local access, the risk is limited to insiders or attackers who have breached initial access controls. There are no known exploits in the wild, and no vendor-provided fix is currently available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious privilege escalation attempts. Avoid granting unnecessary high privileges to users to reduce risk exposure.