CVE-2026-91909
Received Received - Intake

Dell OpenManage Enterprise Command Injection Vulnerability

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: Dell

Description
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-91909

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Dell OpenManage Enterprise 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-88 The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Argument Injection flaw in Dell OpenManage Enterprise versions before 4.8.0. It allows a low-privileged attacker with nearby network access to inject malicious commands by manipulating input arguments, potentially leading to unauthorized command execution on the system.

Impact Analysis

An attacker could exploit this to run unauthorized commands on your system, potentially accessing sensitive data, altering configurations, or disrupting services. Since it requires adjacent network access, attackers must be on the same local network.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data security) requirements. Organizations may face compliance penalties if exploited due to inadequate patching.

Mitigation Strategies

Update Dell OpenManage Enterprise to version 4.8.0 or later to address the vulnerability. Ensure network access controls are in place to restrict adjacent network access for low privileged users.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91909. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...