OS Command Injection Vulnerability in Dell Display and Peripheral Manager
CVE-2026-46735

7.8HIGH

Key Information:

Vendor

Dell
Status
Display And Peripheral Manager
Vendor
CVE Published:
25 June 2026

What is CVE-2026-46735?

Dell Display and Peripheral Manager (DDPM Mac) prior to version 2.3 is susceptible to an OS Command Injection vulnerability. This flaw allows a low privileged local attacker to inject special elements into OS commands, potentially leading to unauthorized command execution, which could compromise the system's integrity and security.

Affected Version(s)

Display and Peripheral Manager 0

References

https://www.dell.com/support/kbdoc/en-hk/000475656/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank Ori Gabriel for reporting this issue.
.