Openmanage Integration
Monthly
OS command injection in Dell OpenManage Integration for Microsoft Windows Admin Center (versions prior to 3.7.0) allows an authenticated low-privileged remote attacker to execute arbitrary commands on the management host, compromising confidentiality, integrity, and availability. The vulnerability requires network access (AV:N) and low privileges (PR:L) but no user interaction (UI:N), and it is only reachable where the Dell OpenManage Integration extension is installed. No public exploit code or active exploitation is currently identified; the vendor has released a security advisory (DSA-2026-442) with a fix in version 3.7.0.
OS command injection in Dell OpenManage Integration for Microsoft Windows Admin Center (versions prior to 3.7.0) allows an authenticated low-privileged remote attacker to execute arbitrary commands on the management host, compromising confidentiality, integrity, and availability. The vulnerability requires network access (AV:N) and low privileges (PR:L) but no user interaction (UI:N), and it is only reachable where the Dell OpenManage Integration extension is installed. No public exploit code or active exploitation is currently identified; the vendor has released a security advisory (DSA-2026-442) with a fix in version 3.7.0.