AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-63694

Dell Technologies SmartFabric OS10: command injection

Dell Technologies

CVE-2026-63694 · Published Sep 3, 2026 · updated Nov 3, 2026

Medium5.0
Fix: upgrade to 10.5.6.14 or later
Dell Technologies advisory

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected versions

PackageAffectedFixed in
SmartFabric OS10
Product
< 10.5.6.1410.5.6.14
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-77

More Dell Technologies advisories

All Dell Technologies
Medium 5.0Sep 3Dell Technologies SmartFabric OS10 Software: command injectionCVE-2026-35160fixed in 10.5.6.14Medium 4.1Sep 3Dell Technologies PowerProtect Data Manager: server-side request forgeryCVE-2026-74768fixed in 20.3.0.0Medium 6.5Sep 3Dell Technologies PowerProtect Data Manager: improper authorizationCVE-2026-74769fixed in 20.3.0.0High 7.8Sep 3Dell Technologies PowerProtect Data Manager: buffer overflowCVE-2026-73600fixed in 20.3.0.0Medium 6.8Sep 3Dell PowerProtect Data ManagerCVE-2026-68860fixed in 20.3.0.0High 8.8Sep 1Dell Technologies PowerStore: improper authorizationCVE-2026-58566fixed in 500T 4.1.0.6-2771237 or later +2