Dell OpenManage Enterprise: OS Command Injection (CVE-2026-94349)
Dell OpenManage Enterprise versions prior to 4.8.0 are susceptible to an OS Command Injection vulnerability, potentially allowing a low-privileged attacker with adjacent network access to execute commands.
CVE search metadata
CVE search record: CVE-2026-94349. Severity: high. CVSS: 8.0. KEV: no. Product: OpenManage Enterprise (< 4.8.0). Brief: Dell OpenManage Enterprise: OS Command Injection (CVE-2026-94349). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cve-2026-94349/
Triage facts
Revision 1- Applicability
- OpenManage Enterprise (< 4.8.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 13:38 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell OpenManage Enterprise versions prior to 4.8.0 contain an Improper Neutralization of Special Elements used in an OS Command vulnerability (CVE-2026-94349). A low-privileged attacker with adjacent network access could potentially exploit this to achieve command execution.