Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-91909

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of…

Risk score
48/100
CVSS
8.0 v3.1
Published
2 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.
Affected
Dell Openmanage Enterprise before 4.8.0
Fix
Upgrade Dell Openmanage Enterprise to 4.8.0 or later.
Exploitation
No known exploitation

Story map

Story map: Dell Openmanage EnterpriseTHE FLAWSTHE FIXCVE-2026-91909Dell OpenManage Enterprise,versions prior to 4.8.0,contains an Improper…CVSS 8.0CVE-2026-94349OS command injectionCVSS 8.0CVE-2026-91908Remote code executionCVSS 6.8CVE-2026-91905Dell OpenManage Enterprise,versions prior to 4.8.0,contains an Improper…CVSS 6.7Upgrade Dell Openmanage…4.8.0or later on your release lineWho is exposedDell Openmanage Enterprisebefore 4.8.0YELLOW · PLAN IT INDell OpenmanageEnterpriseDell OpenManage Enterprise,versions prior to 4.8.0, containsan Improper Neutralization ofArgument Delimiters in aCommand ('Argument Injection')vulnerability. A low privilegedattacker with adjacent…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-88 (CWE-88)53 other warnings in 30 days →Same productEarlier Dell Openmanage Enterprise warnings6 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Openmanage Enterprise: Yellow, plan it in. Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.

The flaws

  • CVE-2026-91909: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of… (CVSS 8.0)
  • CVE-2026-94349: OS command injection (CVSS 8.0)
  • CVE-2026-91908: Remote code execution (CVSS 6.8)
  • CVE-2026-91905: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of… (CVSS 6.7)

The fix

Upgrade Dell Openmanage Enterprise: 4.8.0 or later on your release line

Who is exposed: Dell Openmanage Enterprise before 4.8.0

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.0 high

References

Original description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.

Last activity 2 Nov 2026. Patch Forecast updates every hour.