AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-35160

Dell Technologies SmartFabric OS10 Software: command injection

Dell Technologies

CVE-2026-35160 · Published Sep 3, 2026 · updated Nov 3, 2026

Medium5.0
Fix: upgrade to 10.5.6.14 or later
Dell Technologies advisory

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected versions

PackageAffectedFixed in
SmartFabric OS10 Software
Product
< 10.5.6.1410.5.6.14
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Dell Technologies advisories

All Dell Technologies
Medium 5.0Sep 3Dell Technologies SmartFabric OS10: command injectionCVE-2026-63694fixed in 10.5.6.14Medium 4.1Sep 3Dell Technologies PowerProtect Data Manager: server-side request forgeryCVE-2026-74768fixed in 20.3.0.0Medium 6.5Sep 3Dell Technologies PowerProtect Data Manager: improper authorizationCVE-2026-74769fixed in 20.3.0.0High 7.8Sep 3Dell Technologies PowerProtect Data Manager: buffer overflowCVE-2026-73600fixed in 20.3.0.0Medium 6.8Sep 3Dell PowerProtect Data ManagerCVE-2026-68860fixed in 20.3.0.0High 8.8Sep 1Dell Technologies PowerStore: improper authorizationCVE-2026-58566fixed in 500T 4.1.0.6-2771237 or later +2