Dell OpenManage Integration EUVD-2026-93575

Exploitation requires an attacker who already holds low-privilege authenticated access to the Dell OpenManage Integration running within Microsoft Windows Admin Center (PR:L), and network reachability to that management host (AV:N). No user interaction is required (UI:N) and attack complexity is low (AC:L). The limiting factors are the authentication prerequisite and the restricted deployment surface - the flaw is only reachable on systems where the Dell OpenManage Integration extension (versions prior to 3.7.0) is installed in Windows Admin Center, typically Dell server management environments, not general-purpose hosts.

This is a credible high-priority issue where multiple signals align rather than conflict. The vendor-provided CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) indicates network-reachable, low-complexity OS command injection (CWE-78) that yields full confidentiality, integrity, and availability loss - effectively remote code execution on the host running the Dell OpenManage Integration for Windows Admin Center. The one meaningful limiting factor is PR:L: the attacker must already hold low-privilege authenticated access, so this is privilege escalation to code execution rather than a fully unauthenticated takeover. Exploitation status is 'no public exploit identified at time of analysis' - there is no CISA KEV listing and no POC referenced in the provided data. EPSS is not provided, so exploitation probability cannot be quantified; absence of EPSS/KEV/POC is not evidence of safety but does mean active exploitation is not currently confirmed. There is no SSVC decision record in the input. Net: a genuinely dangerous RCE-class flaw whose real-world urgency is tempered by the authentication prerequisite and the absence of any confirmed exploitation signal - prioritize patching in Dell-managed Windows environments, but it is not (yet) a drop-everything actively-exploited emergency.

A low-privileged authenticated user with network access to the Windows Admin Center server hosting the Dell OpenManage Integration submits a request to an affected feature, embedding shell metacharacters into an input that is passed unsanitized into an OS command. The injected command executes with the privileges of the integration service, giving the attacker remote code execution on the management host. No public exploit code is identified at the time of analysis.