dell-technologiesCVE-2026-54471

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability.

Low3.5CVE-2026-54471 · Published Sep 17, 2026 · updated Sep 18, 2026

Affected versions

Package	Affected	Fixed in
SmartFabric Manager Vendor	< 2.2.1 or later	2.2.1 or later

Details and references

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Severity from: no source yet
Weakness: CWE-280

More dell-technologies advisories

All

Date	Advisory	Severity	Fixed in
Sep 16	Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. CVE-2026-86358Medium6.5fixed in Update Package Framework 26.07.03 or later	Medium6.5	Update Package Framework 26.07.03 or later
Sep 16	Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. CVE-2026-86359High8.5fixed in Repository Manager 3.5.2 or later	High8.5	Repository Manager 3.5.2 or later
Sep 16	Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. CVE-2026-71180High8.2fixed in Update Package Framework 26.07.03 or later	High8.2	Update Package Framework 26.07.03 or later
Sep 16	Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. CVE-2026-71181Low3.0fixed in Update Package Framework 26.07.03 or later	Low3.0	Update Package Framework 26.07.03 or later
Sep 16	Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. CVE-2026-71182Low3.0fixed in Update Package Framework 26.07.03 or later	Low3.0	Update Package Framework 26.07.03 or later
Sep 16	Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. CVE-2026-71179High7.3fixed in Update Package Framework 26.07.03 or later	High7.3	Update Package Framework 26.07.03 or later

Affected versions

More dell-technologies advisories

Critical advisories by email