CVE-2026-26950: High severity Dell SmartFabric Manager vulnerability
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell SmartFabric Managerto a version that resolves this vulnerability.Fixed in 2.2.1
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Dell SmartFabric Manager deployments running a version earlier than 2.2.1 are affected if a low-privileged attacker has remote access to the product.
What level of access does an attacker need?
The attacker needs remote access and low-privileged access. No user interaction is required.
What is the impact if exploitation succeeds?
Successful exploitation could allow elevation of privileges. The reported impact includes high confidentiality and integrity impact, with no availability impact indicated.
How can I determine whether my deployment is affected?
Check the installed Dell SmartFabric Manager version. Versions prior to 2.2.1 are affected.
What should be done to remediate the issue?
Update Dell SmartFabric Manager to version 2.2.1 or later.