8.8
HighCVSS 3.1 · from dell
CVE-2026-91913
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
OpenManage Enterprise · OS command injection · CWE-78AffectedOpenManage Enterprise
FixUpdate to 4.8.0 or later or newer
PublishedOct 30, 13:47 · dell
ScoredOct 30 · 8.8 · dell
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:07 UTC
What we know
No known exploitation. CISA KEV, checked 22:07 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
A successful attack gives full control of the affected system. CISA: technical impact total.
Description
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
From dell
Affected and fixed versions
ProductAffectedFixed inOpenManage Enterprisebefore 4.8.0 or later4.8.0 or later
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known