5.0
Medium
CVE-2026-35160 Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements…
Description
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:NExploitable remotely over the network, with an administrator account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- High
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartFabric OS10 Software 10.5 | earliest → < 10.5.6.14 | 10.5.6.14 |
Other CVEs of SmartFabric OS10 Software
The 31 CVEs of SmartFabric OS10 Software →
CVE-2026-63696
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check…
9.1
Critical
CVE-2026-63695
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability
9.8
Critical
CVE-2026-22284
Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements…
6.6
Medium
CVE-2025-46427
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements…
8.8
High