MDR
Solutions
Partners
About
Resources
Dell
May 5, 2026
Multiple third‑party component vulnerabilities affect OpenSSL, kernels and other libraries, enabling privilege escalation, information disclosure or RCE. If unpatched, these flaws can let an attacker compromise affected management and server platforms or disrupt services via denial‑of‑service.
Dell SmartFabric Manager
Apply vendor patch
Dell SmartFabric Manager before 2.1.0 and a wide range of Dell PowerEdge and Dell EMC XC Core servers running pre‑patched BIOS versions. Environments using these platforms for data centre, storage, or virtualisation workloads may be exposed if firmware and software are not updated.
Compromise of SmartFabric Manager could affect fabric configuration, network control and visibility, impacting reliability of connected systems. Exploitation on PowerEdge or XC Core servers could disrupt hosted workloads, enable data access, or cause service outages through DoS.
The issues stem from vulnerabilities in bundled third‑party components, including OpenSSL, gpg2, libpng16 and multiple kernel versions. Running outdated SmartFabric Manager software or BIOS images that contain these components leaves exploitable flaws present on the systems.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore Managed Detection and ResponseAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Dell has published detailed security updates DSA‑2026‑207 and DSA‑2026‑136 for SmartFabric Manager and PowerEdge OpenSSL issues. Additional information and CVE details are available from NVD and CISA; use these sources to align internal risk assessment and tracking.
.jpg)