EUVD-2026-81676
GHSA-r6j7-8999-3x43
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Network-reachable management plane (AV:N/AC:L), requires an existing low-privilege account (PR:L), no interaction (UI:N); privilege escalation yields high confidentiality and integrity impact but no availability effect (A:N).
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Insufficient verification of data authenticity in Dell SmartFabric Manager versions prior to 2.2.1 allows an authenticated low-privilege user to have attacker-supplied data accepted as trusted, resulting in elevation of privileges with high confidentiality and integrity impact but no availability impact. The flaw is remotely reachable over the management interface with low attack complexity and no user interaction (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, base 8.1 High); the prerequisite is that the attacker already holds valid low-privilege credentials on the fabric manager and can reach its management plane. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated low-privilege account on Dell SmartFabric Manager (PR:L) with network reachability to the management interface (AV:N); no user interaction is needed (UI:N) and attack complexity is low (AC:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, base 8.1 High) describes a network-reachable, low-complexity flaw requiring only low privileges and no user interaction, with high confidentiality and integrity impact but no availability impact - consistent with a CWE-345 Insufficient Verification of Data Authenticity issue enabling elevation of privilege. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Dell SmartFabric Manager to version 2.2.1 or later, as the vendor states all versions prior to 2.2.1 are affected; the update is distributed via Dell's advisory at https://www.dell.com/support/kbdoc/en-us/000489671/dsa-2026-317-security-update-for-dell-smartfabric-manager-multiple-third-party-component-vulnerabilities, which also resolves other third-party component vulnerabilities in the same product. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict management interface access to trusted administrative networks and enforce least privilege on all SmartFabric Manager accounts, auditing for any unauthorized privilege changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Smartfabric Manager
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today