Dell Smartfabric OS10 vulnerabilities

34 CVEs affecting Dell Smartfabric OS10, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-63694, published 2026-09-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32462, published 2024-02-15. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially…
CVE-2024-48017, published 2025-03-17. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A…
CVE-2025-46427, published 2025-11-12. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker…
CVE-2024-38486, published 2024-09-06. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A…
CVE-2025-46428, published 2025-11-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker…
CVE-2026-22284, published 2026-02-17. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker…
CVE-2024-39577, published 2024-09-26. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low…
CVE-2023-28078, published 2024-02-15. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability…
CVE-2026-63694, published 2026-09-03. Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker…
CVE-2026-35160, published 2026-09-03. Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged…

Latest

CVE-2024-48829, published 2025-11-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could…
CVE-2025-36609, published 2025-07-30. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this…
CVE-2025-36608, published 2025-07-30. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could…
CVE-2025-30103, published 2025-07-30. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially…
CVE-2025-22473, published 2025-03-17. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A…