CVE-2026-101210: OS Command Injection
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires a high-privileged attacker with remote access to Dell OpenManage Enterprise. The provided information does not indicate that an unauthenticated or low-privileged attacker can exploit it.
Which installations are affected?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. Version 4.8.0 is not listed as affected in the provided data.
What is the likely impact of successful exploitation?
A successful exploit could allow OS command execution. The reported impact includes high confidentiality, integrity, and availability impact.