CVE-2021-36306: Dell Networking OS10

Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

Affected products

• Dell Networking OS10: before 10.4.3.8 (fixed in 10.4.3.8); from 10.5.0.0, before 10.5.0.10 (fixed in 10.5.0.10); from 10.5.1.0, before 10.5.1.10 (fixed in 10.5.1.10); from 10.5.2.0, before 10.5.2.8 (fixed in 10.5.2.8)

Published 2021-11-20. Last modified 2026-06-17.