Command Injection Vulnerability in Dell SmartFabric OS10 Software
CVE-2025-46427

8.8HIGH

Key Information:

Vendor

Dell
Status
Smartfabric Os10 Software
Vendor
CVE Published:
12 November 2025

What is CVE-2025-46427?

Dell SmartFabric OS10 Software prior to version 10.6.1.0 is vulnerable to a Command Injection issue. This flaw allows low privileged attackers with remote access to execute arbitrary commands, potentially compromising system integrity and security. Organizations using affected versions must apply the security update to mitigate risks associated with this vulnerability.

Affected Version(s)

SmartFabric OS10 Software < 10.6.1.0

References

https://www.dell.com/support/kbdoc/en-us/000391062/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank kkking for reporting these issues.
JSON
.
CVE-2025-46427 : Command Injection Vulnerability in Dell SmartFabric OS10 Software