Session Fixation Vulnerability in Dell SmartFabric OS10 Software
CVE-2026-63695

9.8CRITICAL

Key Information:

Vendor

Dell
Status
Smartfabric Os10 Software
Vendor
CVE Published:
15 September 2026

What is CVE-2026-63695?

The Dell SmartFabric OS10 Software, specifically versions earlier than 10.6.1.3, is susceptible to a session fixation vulnerability. This could allow an unauthenticated attacker with remote access to exploit the vulnerability, potentially resulting in session theft and unauthorized access to sensitive data.

Affected Version(s)

SmartFabric OS10 Software 0 < 10.6.1.3

References

https://www.dell.com/support/kbdoc/en-us/000507473/dsa-20...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank WinD39 - Huynh Dinh Vu for reporting this issue
.