CVE-2026-101214: OS Command Injection
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires a high-privileged attacker with remote access to Dell OpenManage Enterprise. The attack vector is network-based and does not require user interaction.
Which deployments are affected?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. The provided information does not identify any configuration prerequisite beyond running an affected version.
What is the impact of successful exploitation?
A successful attacker could execute operating-system commands. The stated impact includes high confidentiality, integrity, and availability effects.
What should be prioritized for remediation?
Upgrade affected Dell OpenManage Enterprise deployments to version 4.8.0 or later. If upgrading cannot occur immediately, limit remote access to the product to trusted, high-privileged administrators.