Command Injection Vulnerability in Dell OpenManage Enterprise
CVE-2026-91909

4.6MEDIUM

Key Information:

Vendor

Dell
Status
Openmanage Enterprise
Vendor
CVE Published:
2 November 2026

What is CVE-2026-91909?

Dell OpenManage Enterprise prior to version 4.8.0 is susceptible to a command injection vulnerability. An attacker with low privileges and adjacent network access could exploit this flaw to execute arbitrary commands on the host system. This risk underscores the importance of immediate updates to secure the application from potential exploitation.

Affected Version(s)

OpenManage Enterprise 0 < 4.8.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.