Dell OpenManage Enterprise CVE-2026-101214

Exploitation requires the attacker to already hold high-privileged (administrative) access to the Dell OpenManage Enterprise management console (CVSS PR:H) and network reachability to it (AV:N); no end-user interaction is needed (UI:N). The limiting factor is significant: this is not remotely exploitable by an unauthenticated attacker - an existing admin-level foothold or valid high-privilege credentials on the console are a hard prerequisite, which sharply narrows realistic exploitation to insiders, credential-theft scenarios, or chaining from a separate authentication bypass. The available sources do not describe the exact feature, parameter, or configuration that carries the injectable input, so the specific trigger is not described in the available sources. Affected deployments are any Dell OpenManage Enterprise instances running a version prior to 4.8.0.

This is a genuine but conditional risk rather than a drop-everything emergency. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N, base 7.2 High) describes network-reachable, low-complexity exploitation with no user interaction, but critically requires PR:H - an attacker must already hold high (administrative) privileges on the OpenManage Enterprise console. That single factor dominates the risk picture: the impact is severe (C:H/I:H/A:H, OS command execution), yet the attacker precondition is substantial. No EPSS score is provided, the CVE is not listed in CISA KEV, and no exploit/PoC reference appears in the input, so there is no public signal of active exploitation or weaponization. The vendor-assigned priority is 'this_week', which is consistent with a High-severity, patched, but privilege-gated issue - important to remediate promptly but not evidence of in-the-wild attacks. The main conflict to flag: an authenticated-admin command-injection flaw is most dangerous as a privilege-boundary bypass (admin of the app → OS-level command execution on the underlying host) and as a post-compromise lateral-movement tool, rather than as a mass-exploitation threat. No key signals are strongly contradictory; the primary limitation is simply the absence of EPSS/KEV/PoC data to confirm or rule out exploitation interest.

An attacker who has already obtained high-privileged (administrative) access to the Dell OpenManage Enterprise web console - for example via stolen operator credentials or an abused admin session - submits input containing OS command metacharacters to an affected function, which is improperly neutralized and passed to an operating-system command. This lets the attacker break out of the application and execute arbitrary commands on the underlying host, turning application-level admin access into OS-level control. No public exploit or PoC is identified in the available data, and the exact vulnerable parameter/endpoint is not described in the sources.