Dell OpenManage Enterprise <4.8.0 Argument Injection (Cmd Arg)
CVE-2026-111504 Published on October 30, 2026

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-111504 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is an Argument Injection Vulnerability?

The software constructs a string for a command to executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

CVE-2026-111504 has been classified to as an Argument Injection vulnerability or weakness.


Products Associated with CVE-2026-111504

Want to know whenever a new CVE is published for Dell Openmanage Enterprise? stack.watch will email you.

Dell Openmanage Enterprise

Affected Versions

Dell OpenManage Enterprise: