Live › vulnerability › CVE-2026-91909
Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize argument delimiters in a command, an argument injection flaw. A low-privileged attacker with adjacent network access could potentially execute commands.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 13:23 UTC. All times on this page are UTC.
Teams that run Dell OpenManage Enterprise below version 4.8.0 on a network segment reachable by low-privileged users. The sources do not say whether a default configuration is affected. Teams on 4.8.0 or later are not affected by this entry.
No product ranges from the sources yet.
4.8.0 is in the stated range.4.8.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-91909")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.