{"id":"CVE-2026-94349","kind":"vulnerability","aliases":["CVE-2026-94349"],"related":[],"title":"Dell OpenManage Enterprise: OS command injection lets low-privileged users run commands","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an OS command injection flaw. A low-privileged attacker with adjacent network access could run commands on the affected system.","severity":"high","cvss":8.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-openmanage-enterprise","infrastructure","on-prem","self-hosted"],"not_affected_if":["version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; anything below `4.8.0` is in scope.\n- Confirm whether the appliance is reachable from segments where low-privileged users or untrusted hosts sit.","fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later","status":"open","published_at":"2026-11-02T13:17:41+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","triaged_at":"2026-11-02T13:24:46+00:00","updated_at":"2026-11-02T13:24:46+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-02T13:24:46Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: upgrade to `4.8.0` or later","reach":"network","title":"Dell OpenManage Enterprise: OS command injection lets low-privileged users run commands","impact":"high","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an OS command injection flaw. A low-privileged attacker with adjacent network access could run commands on the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-openmanage-enterprise","self-hosted","on-prem"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Commands run on the management server under attacker control","analyst_note":"Confirm the exact attack preconditions and whether the flaw is reachable beyond adjacent network; check Dell's advisory for the affected version range and any workaround.","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; anything below `4.8.0` is in scope.\n- Confirm whether the appliance is reachable from segments where low-privileged users or untrusted hosts sit.","plain_action":"","needs_analyst":true,"not_affected_if":["version-4.8.0-or-later"],"who_is_affected":"Teams running Dell OpenManage Enterprise before 4.8.0, especially where the management appliance is reachable from adjacent network segments. The sources do not describe default configuration or whether any specific feature must be enabled. Teams already on 4.8.0 or later are not affected by this flaw.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000704,"input_tokens":4136,"output_tokens":581,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-94349':16A,19A '4.8.0':36B,65C 'access':51B,89C 'adjac':49B,87C 'affect':57B 'attack':47B,85C 'command':5A,13A,40B,54B,77C,79C,97C 'contain':37B,66C 'could':52B,90C 'cve':14A,17A 'dell':1A,21B,31B,59C 'dell-openmanage-enterpris':20B 'element':72C 'enterpris':3A,23B,33B,61C 'execut':98C 'exploit':92C 'flaw':42B 'host':30B 'improp':68C 'infrastructur':24B 'inject':6A,41B,80C 'lead':95C 'let':7A 'low':9A,45B,83C 'low-privileg':8A,44B 'network':50B,88C 'neutral':69C 'on-prem':25B 'openmanag':2A,22B,32B,60C 'os':4A,39B,76C,78C 'potenti':91C 'prem':27B 'prior':63C 'privileg':10A,46B,84C 'run':12A,53B 'self':29B 'self-host':28B 'special':71C 'system':58B 'use':73C 'user':11A 'version':34B,62C 'vulner':81C,94C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell OpenManage Enterprise before 4.8.0, especially where the management appliance is reachable from adjacent network segments. The sources do not describe default configuration or whether any specific feature must be enabled. Teams already on 4.8.0 or later are not affected by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellopenmanageenterprise","high","infrastructure","onprem","selfhosted"],"first_public_at":"2026-11-02T13:17:41+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94349","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94349","severity":null,"published_at":"2026-11-02T13:17:41+00:00","modified_at":"2026-11-02T13:17:41+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","fetched_at":"2026-11-02T13:23:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}