CVE-2026-94349: OS Command Injection

Q: Which deployments are affected?

Dell OpenManage Enterprise versions prior to 4.8.0 are affected. The provided information does not identify any configuration-specific exception.

Q: What access does an attacker need to exploit this issue?

An attacker needs adjacent network access and a low-privileged account. No user interaction is required.

Q: What is the potential impact of successful exploitation?

Successful exploitation could allow command execution. The vulnerability is rated high severity and has high confidentiality, integrity, and availability impact.

Q: What version should be used to remediate the issue?

Upgrade Dell OpenManage Enterprise to version 4.8.0 or later. The affected range is explicitly limited to versions prior to 4.8.0.

Published Nov 2, 2026

Updated

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.

Affected Software

1 affected component

Dell OpenManage Enterprise<4.8.0

Event History

Nov 2, 2026

CVE Published

via NVD·01:17 PM

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which deployments are affected?

Dell OpenManage Enterprise versions prior to 4.8.0 are affected. The provided information does not identify any configuration-specific exception.

What access does an attacker need to exploit this issue?

An attacker needs adjacent network access and a low-privileged account. No user interaction is required.

What is the potential impact of successful exploitation?

Successful exploitation could allow command execution. The vulnerability is rated high severity and has high confidentiality, integrity, and availability impact.

What version should be used to remediate the issue?

Upgrade Dell OpenManage Enterprise to version 4.8.0 or later. The affected range is explicitly limited to versions prior to 4.8.0.

CVE-2026-94349: OS Command Injection

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

What version should be used to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

What version should be used to remediate the issue?