{"id":"CVE-2026-111504","kind":"vulnerability","aliases":["CVE-2026-111504"],"related":[],"title":"Dell OpenManage Enterprise: argument injection lets a privileged user escalate privileges","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","summary":"Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize argument delimiters in a command, an argument injection flaw. A high-privileged attacker with remote access can potentially escalate their privileges.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-openmanage-enterprise","infrastructure","on-prem","self-hosted"],"not_affected_if":["no-remote-access","version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the appliance console or web UI and compare it with `4.8.0`.","fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later.","status":"open","published_at":"2026-10-30T12:16:34+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","triaged_at":"2026-10-30T12:32:21+00:00","updated_at":"2026-10-30T12:32:21+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-30T12:32:21Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later.","reach":"network","title":"Dell OpenManage Enterprise: argument injection lets a privileged user escalate privileges","impact":"medium","summary":"Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize argument delimiters in a command, an argument injection flaw. A high-privileged attacker with remote access can potentially escalate their privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-openmanage-enterprise","self-hosted","on-prem"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker with admin-level access escalates privileges on the management server","analyst_note":"","how_to_check":"- Check the installed OpenManage Enterprise version in the appliance console or web UI and compare it with `4.8.0`.\n- unknown","plain_action":"","needs_analyst":false,"not_affected_if":["version-4.8.0-or-later","no-remote-access"],"who_is_affected":"Teams that run Dell OpenManage Enterprise for server management on versions before 4.8.0 are exposed. The attacker needs high privileges and remote access to the management console, so restricting who can reach and log into the console narrows the risk. unknown for anything beyond that.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000671,"input_tokens":4139,"output_tokens":515,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111504':14A,17A '-2026':13A,16A '4.8.0':34B,66C 'access':54B,86C 'argument':4A,38B,44B,72C,77C 'attack':51B,83C 'command':42B,76C 'contain':67C 'could':87C 'cve':12A,15A 'delimit':39B,73C 'dell':1A,19B,29B,60C 'dell-openmanage-enterpris':18B 'elev':94C 'enterpris':3A,21B,31B,62C 'escal':10A,57B 'exploit':89C 'fail':35B 'flaw':46B 'high':49B,81C 'high-privileg':48B 'host':28B 'improp':69C 'infrastructur':22B 'inject':5A,45B,78C 'lead':92C 'let':6A 'neutral':37B,70C 'on-prem':23B 'openmanag':2A,20B,30B,61C 'potenti':56B,88C 'prem':25B 'prior':64C 'privileg':8A,11A,50B,59B,82C,96C 'remot':53B,85C 'self':27B 'self-host':26B 'user':9A 'version':32B,63C 'vulner':79C,91C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell OpenManage Enterprise for server management on versions before 4.8.0 are exposed. The attacker needs high privileges and remote access to the management console, so restricting who can reach and log into the console narrows the risk. unknown for anything beyond that.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111504","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111504","severity":null,"published_at":"2026-10-30T12:16:34+00:00","modified_at":"2026-10-30T12:16:34+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","fetched_at":"2026-10-30T12:30:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}