CVE-2026-91913: OS Command Injection
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. The provided information does not identify any configuration-specific exclusions.
What access does an attacker need to exploit this issue?
An attacker needs remote access and low-privileged access to Dell OpenManage Enterprise. No user interaction is required.
What is the likely impact of successful exploitation?
Successful exploitation could allow command execution. The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability.
What is the available remediation?
Upgrade Dell OpenManage Enterprise to version 4.8.0 or later. The provided data does not specify compensating controls for environments where an upgrade cannot be applied immediately.