Dell OpenManage Enterprise: administrator-level remote user breaks out to OS command execution

CVSS 7.2CVE-2026-101210Firmware, BMC & network fabric+1 more CVEscurated

Impact

A high-privileged remote user of the OpenManage Enterprise console can execute operating-system commands on the appliance, crossing from application administration to the underlying host. That turns a compromised or misused console admin session into persistent footing on the box that holds fleet iDRAC credentials and firmware workflows, and it defeats the assumption that a console admin is confined to the application. Dell split this same high-privileged remote OS command injection across two ids with identical descriptions and scores (CVE-2026-101210, CVE-2026-101214), fixed in the same release; this entry covers both. The affected endpoint is not named.

Who can reach it

Network access to the OME console with an administrator-level account. Authentication required; no user interaction.

What to do

Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467). Appliance update plus console restart; no node drain or reboot. Given the privilege required, also review who holds console admin and whether that access is MFA-gated.

Also covers 1 CVE

The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.

CVE-2026-101214

References

https://nvd.nist.gov/vuln/detail/CVE-2026-101210 https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.