VulnerabilityUndergoing Analysis

CVE-2026-35160

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

MEDIUM 5.0EPSS 1.10%

Does this matter?

Lower severity and a low EPSS score (1.10%). Track it; it rarely justifies an emergency change on its own.

Description

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVSS 3.1: 5.0 MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
EPSS: 1.10% probability · 64th percentile
CISA KEV: Not listed
Weakness: CWE-78
Source: security_alert@emc.com

References

https://www.dell.com/support/kbdoc/en-us/000501840/dsa-2026-322-security-update-for-dell-networking-os10-vulnerabilities

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.