CVE-2026-63694: Command Injection
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell SmartFabric OS10 Softwareto a version that resolves this vulnerability.Fixed in 10.5.6.14
Event History
Frequently Asked Questions
Which systems are affected?
Dell SmartFabric OS10 versions earlier than 10.5.6.14 are affected. Systems running 10.5.6.14 or later are not identified as affected by the provided information.
What access does an attacker need to exploit this issue?
Exploitation requires remote access and high privileges on the affected OS10 system. The attack complexity is rated high, and no user interaction is required.
What is the impact if exploitation succeeds?
A successful attacker could execute commands on the affected system. The supplied impact metrics indicate high confidentiality impact and low integrity impact, with no availability impact.
What should be done to remediate the issue?
Upgrade affected Dell SmartFabric OS10 installations to version 10.5.6.14 or later.