CVE Catalog
CVE-2026-35070
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk0.45%
37th percentile - higher than 37% of all known CVEs
Summary
Dell SmartFabric Storage Software versions prior to 1.4.5 contain a command injection vulnerability. A high-privileged authenticated attacker with local access can exploit this to gain filesystem access.
Risk Assessment
An attacker can gain filesystem access, potentially leading to data theft or further privilege escalation.
Recommendation
Update Dell SmartFabric Storage Software to version 1.4.5 or later.
Original NVD description (English source)
Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.