CVE-2026-35070 — Dell / SmartFabric Storage Software

CVE-2026-35070

Dell / SmartFabric Storage Software PUBLISHED

Description (CNA)

Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

Affected (CNA)

Vendor / product	Versions
Dell / SmartFabric Storage Software	affected 0 before 1.4.5 or later

CWE

CWE-77

References

https://www.dell.com/support/kbdoc/en-us/000466942/dsa-2026-235-security-update-for-dell-networking-smartfabric-storage-software-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.