{"id":"CVE-2026-61418","kind":"vulnerability","aliases":["CVE-2026-61418"],"related":[],"title":"Dell SmartFabric OS10: incorrect authorization lets a low-privilege user run commands","description":"Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.","summary":"Dell SmartFabric OS10 network switch software before 10.6.0.10 has an incorrect authorization flaw. A low-privileged attacker with remote access could run commands on the device.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","network-switches","smartfabric-os10"],"not_affected_if":["version-10.6.0.10-or-later"],"how_to_check":"- Check the installed OS10 version on each switch with `show version`\n- Compare it against the fixed version `10.6.0.10`","fix":"- Dell SmartFabric OS10 Software: upgrade to `10.6.0.10` or later","status":"open","published_at":"2026-11-13T10:18:15+00:00","first_seen_at":"2026-11-13T10:47:35+00:00","triaged_at":"2026-11-13T10:52:44+00:00","updated_at":"2026-11-13T10:52:44+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-13T10:52:44Z","model":"claude-haiku-5-5","output":{"fix":"- Dell SmartFabric OS10 Software: upgrade to `10.6.0.10` or later","reach":"network","title":"Dell SmartFabric OS10: incorrect authorization lets a low-privilege user run commands","impact":"high","summary":"Dell SmartFabric OS10 network switch software before 10.6.0.10 has an incorrect authorization flaw. A low-privileged attacker with remote access could run commands on the device.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","smartfabric-os10","network-switches"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"low-privileged remote user runs commands on the switch","analyst_note":"Confirm the remote access path and required configuration from the Dell advisory at the NVD link or Dell's security page.","how_to_check":"- Check the installed OS10 version on each switch with `show version`\n- Compare it against the fixed version `10.6.0.10`","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-10.6.0.10-or-later"],"who_is_affected":"Organisations running Dell SmartFabric OS10 switches on versions before 10.6.0.10 are exposed. The sources do not say which configurations or management interfaces are needed, so unknown. Devices not running SmartFabric OS10 are not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000713,"input_tokens":4544,"output_tokens":517,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-61418':16A,19A '10.6.0.10':35B,62C 'access':48B,74C 'attack':45B,71C 'author':5A,39B,66C 'command':13A,51B,82C 'contain':63C 'could':49B,75C 'cve':14A,17A 'dell':1A,20B,28B,55C 'devic':54B 'execut':83C 'exploit':77C 'flaw':40B 'incorrect':4A,38B,65C 'infrastructur':21B 'lead':80C 'let':6A 'low':9A,43B,69C 'low-privileg':8A,42B 'network':23B,31B 'network-switch':22B 'os10':3A,27B,30B,57C 'potenti':76C 'prior':60C 'privileg':10A,44B,70C 'remot':47B,73C 'run':12A,50B 'smartfabr':2A,26B,29B,56C 'smartfabric-os10':25B 'softwar':33B,58C 'switch':24B,32B 'user':11A 'version':59C 'vulner':67C,79C","nicknames":[],"mitigations":[],"who_affected":"Organisations running Dell SmartFabric OS10 switches on versions before 10.6.0.10 are exposed. The sources do not say which configurations or management interfaces are needed, so unknown. Devices not running SmartFabric OS10 are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","high","infrastructure","networkswitches","smartfabricos10"],"campaign_type":null,"search_a":"'-2026':15A,18A '-61418':16A,19A 'author':5A 'command':13A 'cve':14A,17A 'dell':1A 'incorrect':4A 'let':6A 'low':9A 'low-privileg':8A 'os10':3A 'privileg':10A 'run':12A 'smartfabr':2A 'user':11A","search_b":"'10.6.0.10':35B 'access':48B 'attack':45B 'author':39B 'command':51B 'could':49B 'dell':20B,28B 'devic':54B 'flaw':40B 'incorrect':38B 'infrastructur':21B 'low':43B 'low-privileg':42B 'network':23B,31B 'network-switch':22B 'os10':27B,30B 'privileg':44B 'remot':47B 'run':50B 'smartfabr':26B,29B 'smartfabric-os10':25B 'softwar':33B 'switch':24B,32B","search_c":"'10.6.0.10':62C 'access':74C 'attack':71C 'author':66C 'command':82C 'contain':63C 'could':75C 'dell':55C 'execut':83C 'exploit':77C 'incorrect':65C 'lead':80C 'low':69C 'os10':57C 'potenti':76C 'prior':60C 'privileg':70C 'remot':73C 'smartfabr':56C 'softwar':58C 'version':59C 'vulner':67C,79C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T10:18:15+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-61418","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61418","severity":null,"published_at":"2026-11-13T10:18:15+00:00","modified_at":"2026-11-13T10:18:15+00:00","first_seen_at":"2026-11-13T10:47:35+00:00","fetched_at":"2026-11-13T10:47:35+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}