Dell SmartFabric OS10: improper access control lets a low-privileged user cause a denial of service

Impact

A user with a low-privilege account on a Dell OS10 switch can bring the switch down remotely. In a GPU cluster these switches often carry the data-center Ethernet or RoCE fabric, so one outage can stall jobs across many nodes at once. The record does not say which service or interface is affected.

Who can reach it

Network access to the switch management interface plus a valid low-privilege account. Authentication is required.

What to do

Upgrade SmartFabric OS10 to 10.6.0.10 or later (Dell DSA-2026-438). Upgrading a switch OS image normally means reloading the switch, so plan the rollout around fabric redundancy. Until then, restrict management access and review which low-privilege accounts exist.

References

Related entries

• Dell SmartFabric OS10: incorrect authorization lets a low-privileged user execute commandsCVE-2026-61418 · Dell SmartFabric OS10 (datacenter switch OS)High
• HPE iLO 6 (denial of service): An unauthenticated attacker on an adjacent network can knock out iLO 6 availabilityCVE-2026-63457 · HPE iLO 6 (denial of service)Medium
• Dell OpenManage Enterprise: XML external entity processing exposes information to a low-privileged userCVE-2026-70423 · Dell OpenManage Enterprise (XML external entity processing)Medium
• Dell OpenManage Enterprise: path traversal exposes information to a low-privileged remote userCVE-2026-70424 · Dell OpenManage Enterprise (path traversal in a restricted-directory check)Medium
• Arista EOS: DHCP relay forwards replies from unconfigured servers, allowing client config spoofingCVE-2026-73437 · Arista EOS DHCP relay (helper-address source validation)Medium
• Dell OMSA: authenticated path traversal lets a low-privileged user read files off the nodeCVE-2026-81453 · Dell OpenManage Server Administrator (path traversal, authenticated)Medium