{"id":"CVE-2026-101210","kind":"vulnerability","aliases":["CVE-2026-101210"],"related":[],"title":"Dell OpenManage Enterprise: OS command injection lets an admin run commands","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an OS command injection flaw that lets a high-privileged remote attacker execute commands. The sources describe the impact as command execution on the management server.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","openmanage-enterprise","servers"],"not_affected_if":["no-remote-admin-access","version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; versions below `4.8.0` are listed as affected.","fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later","status":"open","published_at":"2026-10-30T12:16:34+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","triaged_at":"2026-10-30T12:32:23+00:00","updated_at":"2026-10-30T12:32:23+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-30T12:32:23Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later\n- unknown","reach":"network","title":"Dell OpenManage Enterprise: OS command injection lets an admin run commands","impact":"high","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an OS command injection flaw that lets a high-privileged remote attacker execute commands. The sources describe the impact as command execution on the management server.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage-enterprise","servers"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker runs operating system commands on the management server","analyst_note":"Check Dell's security advisory for affected versions, patch details and any required configuration; the NVD entry alone does not confirm the exact conditions.","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; versions below `4.8.0` are listed as affected.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["version-4.8.0-or-later","no-remote-admin-access"],"who_is_affected":"Organizations that run Dell OpenManage Enterprise for server management, below version 4.8.0. The attacker needs high privileges and remote access to the management interface, so teams that restrict access to the console to trusted administrators face less exposure. unknown for any further configuration conditions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000691,"input_tokens":4133,"output_tokens":556,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101210':14A,17A '-2026':13A,16A '4.8.0':29B,64C 'access':87C 'admin':9A 'attack':43B,84C 'command':5A,11A,33B,45B,52B,76C,78C,95C 'contain':30B,65C 'could':88C 'cve':12A,15A 'dell':1A,18B,24B,58C 'describ':48B 'element':71C 'enterpris':3A,22B,26B,60C 'execut':44B,53B,96C 'exploit':90C 'flaw':35B 'high':40B,82C 'high-privileg':39B 'impact':50B 'improp':67C 'infrastructur':19B 'inject':6A,34B,79C 'lead':93C 'let':7A,37B 'manag':56B 'neutral':68C 'openmanag':2A,21B,25B,59C 'openmanage-enterpris':20B 'os':4A,32B,75C,77C 'potenti':89C 'prior':62C 'privileg':41B,83C 'remot':42B,86C 'run':10A 'server':23B,57B 'sourc':47B 'special':70C 'use':72C 'version':27B,61C 'vulner':80C,92C","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Dell OpenManage Enterprise for server management, below version 4.8.0. The attacker needs high privileges and remote access to the management interface, so teams that restrict access to the console to trusted administrators face less exposure. unknown for any further configuration conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101210","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101210","severity":null,"published_at":"2026-10-30T12:16:34+00:00","modified_at":"2026-10-30T12:16:34+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","fetched_at":"2026-10-30T12:30:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}