CVE-2026-111505: OS Command Injection
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. The provided information does not identify configuration-specific exclusions.
What access does an attacker need to exploit this issue?
An attacker needs remote access to Dell OpenManage Enterprise and only low-privileged access. No user interaction is required.
What could successful exploitation allow?
Successful exploitation could lead to command execution. The vulnerability is rated high severity with impacts to confidentiality, integrity, and availability.