CVE-2026-91909
Medium · 4.6CVSS
4.6
EPSS
0.7%
Published
Nov 2, 2026
CISA due date
—
The record
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-97350 Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of… CWE-88
- CVE-2026-62968 Dream Displays provides in-game screens for streaming videos in Minecraft. CWE-88
- CVE-2026-116252 pgAdmin 4's materialized view refresh passed the target database's name to psql's… CWE-88
- CVE-2026-111504 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization… CWE-88
- CVE-2026-119282 Nx is a monorepo solution for TypeScript and polyglot codebases. CWE-88
- CVE-2026-90868 An OS command injection vulnerability in Progress Software WS_FTP Server versions prior… CWE-88
- CVE-2026-90865 An OS command injection vulnerability in Progress Software WS_FTP Server versions prior… CWE-88
- CVE-2026-50056 A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra… CWE-88