CVE-2026-35070 is a command injection vulnerability in Dell SmartFabric Storage Software before version 1.4.5. It arises from improper neutralization of special elements used in commands, allowing a high privileged attacker with local access to execute arbitrary commands on the system. This can result in unauthorized access to the filesystem. The vulnerability has a CVSS 3.1 score of 6.4 with attack vector local, attack complexity high, privileges required high, no user interaction, and impacts confidentiality, integrity, and availability.

An attacker with high privileges and local access could exploit this vulnerability to execute arbitrary commands, potentially gaining unauthorized access to the filesystem. This could compromise confidentiality, integrity, and availability of the affected system's data. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published by Dell, organizations should monitor Dell's advisories for updates. Until a patch is available, restrict local access to trusted users only and apply the principle of least privilege to limit potential exploitation.