Description
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Published: 2026-09-17
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Elevation of privileges
Action: Immediate Patch
AI Analysis

Impact

Dell SmartFabric Manager has an Insufficient Verification of Data Authenticity flaw (CWE‑345). A low‑privileged attacker who can communicate with the manager via remote channels can manipulate or forge data sent to the system, potentially causing it to accept malicious inputs and elevate the attacker’s privileges within the management environment.

Affected Systems

Dell SmartFabric Manager versions earlier than 2.2.1 are affected. Only the Dell SmartFabric Manager product is listed; no additional vendors or product variants were identified.

Risk and Exploitability

The CVSS score of 8.1 indicates a high severity vulnerability. No EPSS score is available, so the current exploit probability is unknown, and the flaw has not been cataloged in CISA KEV. Based on the description, the likely attack vector is remote; a low‑privileged user with network reach to the manager could potentially exploit the weakness without additional access privileges.

Generated by OpenCVE AI on September 17, 2026 at 20:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dell SmartFabric Manager to version 2.2.1 or later.
  • Restrict remote access to the manager to trusted administrators only, using secure authentication and role‑based access controls.
  • Ensure that all data sent to and from the manager is authenticated and signed, following best practices for data integrity verification.

Generated by OpenCVE AI on September 17, 2026 at 20:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 17 Sep 2026 21:15:00 +0000

Type Values Removed Values Added
Title Insufficient Verification of Data Authenticity Enables Privilege Escalation in Dell SmartFabric Manager
First Time appeared Dell
Dell smartfabric Manager
Vendors & Products Dell
Dell smartfabric Manager

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 17 Sep 2026 15:15:00 +0000

Type Values Removed Values Added
Description Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Weaknesses CWE-345
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}


Subscriptions

Dell Smartfabric Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-18T03:56:15.240Z

Reserved: 2026-02-16T18:04:20.509Z

Link: CVE-2026-26950

cve-icon Vulnrichment

Updated: 2026-09-17T15:23:42.795Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-09-17T15:16:46.763

Modified: 2026-09-18T17:55:19.340

Link: CVE-2026-26950

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-17T21:00:17Z

Weaknesses
  • CWE-345

    Insufficient Verification of Data Authenticity