Dell SmartFabric Manager: insufficient verification of data authenticity allows privilege elevation

Impact

SmartFabric Manager is the controller for Dell fabric switches, which in an accelerator fleet carry storage and east-west traffic between nodes. A low-privileged remote account can escalate privileges because the product does not sufficiently verify the authenticity of data it accepts. An attacker holding fabric-manager administrative rights can reconfigure switching across the fleet - VLAN and port assignments that separate tenants, or uplinks that carry storage traffic. The advisory covers multiple third-party component issues and does not detail the exact data path.

Who can reach it

A remote attacker with a low-privileged account on SmartFabric Manager. Authentication is required, so exposure depends on who can log in to the fabric management plane - normally restricted to the management VLAN.

What to do

Upgrade Dell SmartFabric Manager to 2.2.1 or later per DSA-2026-317 and restart the management service. This is a management-plane appliance upgrade, not a switch firmware flash, so data-plane forwarding is not interrupted. Keep the SmartFabric Manager interface off any tenant-reachable network and audit low-privileged accounts on it.

References

Related entries

• Network UPS Tools upsmon: server-supplied UPS alarm text is executed as a shell command, often as rootCVE-2026-54161 · Network UPS Tools upsmon (ups.alarm in NOTIFYCMD shell execution)High
• Linux kernel FC transport: malformed FPIN ELS frame hangs the kernel via a u8 pname walker counterCVE-2026-63889 · Linux kernel scsi_transport_fc (FPIN pname_count walker, lpfc/qla2xxx initiators)High
• Dell OpenManage Enterprise: low-privileged remote user can inject SQL into the management consoleCVE-2026-70422 · Dell OpenManage Enterprise (management console, SQL injection)High
• Dell OMSA: improper privilege management lets a low-privileged remote user tamper with the nodeCVE-2026-81442 · Dell OpenManage Server Administrator (privilege management)High
• Dell OMSA: missing authentication on a critical function lets an unauthenticated attacker execute codeCVE-2026-81475 · Dell OpenManage Server Administrator (managed node web/agent service)High
• Dell OMSA: unauthenticated OS command injection gives remote execution on the managed nodeCVE-2026-81476 · Dell OpenManage Server Administrator (managed node service, OS command handling)High