Dell OpenManage Enterprise: improper input validation lets an adjacent low-privileged user execute code

CVSS 8.0CVE-2026-91917Firmware, BMC & network fabriccurated

Impact

A low-privileged account reaching the console from the adjacent network can get code execution on the OpenManage Enterprise appliance. Because OME stores iDRAC credentials and pushes firmware and power actions to managed servers, code execution on it converts a single low-value console login into hardware-level reach across the managed fleet. Dell's record gives the class only and does not name the affected input path.

Who can reach it

Adjacent-network access to the OME console - in practice the management VLAN or segment it sits on - plus a valid low-privileged account. Authentication required.

What to do

Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467): appliance update and management-console restart, no change to managed nodes. Keep the console on an isolated management segment; the CVSS vector already assumes the attacker is adjacent, so segmentation is the only stated mitigation lever.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-91917 https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.