CVE-2026-35070 is a command injection vulnerability in Dell SmartFabric Storage Software versions before 1.4.5. It arises from improper neutralization of special elements in commands, allowing a high privileged attacker with local access to execute arbitrary commands. This can result in unauthorized filesystem access. The vulnerability has a CVSS 3.1 score of 6.4 with attack vector local, attack complexity high, privileges required high, no user interaction, and impacts confidentiality, integrity, and availability.

A successful exploit allows a high privileged local attacker to execute arbitrary commands on the affected system, leading to full filesystem access. This compromises confidentiality, integrity, and availability of the system data. However, exploitation requires local access and high privileges, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity. Avoid granting unnecessary high privileges to users on affected versions. Follow Dell's official communications for updates on patches or mitigations.