CVE Catalog

CVE-2026-101214

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.84%

87th percentile - higher than 87% of all known CVEs

Summary

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. A high privileged attacker with remote access could exploit it to execute commands.

Risk Assessment

Could allow remote OS command execution by a high privileged attacker, leading to full compromise of the appliance.

Recommendation

Update Dell OpenManage Enterprise to version 4.8.0 or later. Restrict remote access to the management interface.

Other vulnerabilities in Dell OpenManage Enterprise

See all
Original NVD description (English source)

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS