What is CVE-2026-94349 in Dell OpenManage Enterprise?

Dell OpenManage Enterprise, in versions prior to 4.8.0, contains an improper neutralization of special elements used in an OS command vulnerability, officially tracked as CVE-2026-94349. This type of flaw, commonly known as OS command injection, can pose severe security risks to enterprise network infrastructures.

Similar to incidents involving other critical system flaws such as CVE-2026-58946, understanding how input validation fails helps administrators prioritize patches. The issue stems from insufficient sanitization of parameters handled by the application.

Who is affected and what are the risks?

A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading directly to arbitrary command execution on the underlying operating system.

Because the flaw requires adjacent network access, environments where network segmentation is weak or where untrusted devices share the same local broadcast domain face heightened risks. Organizations managing extensive IT hardware must review their exposure promptly, keeping in mind other enterprise-level risks like CVE-2026-58957 or ecosystem libraries such as la librería zip de Rust.

How do I protect my systems?

Mitigating this vulnerability requires applying the official software updates provided by the vendor. Administrators should consult the security advisory for detailed update instructions and patch availability.

Review your network perimeter settings and apply the following defensive actions to secure your appliances:

  1. Verify your current Dell OpenManage Enterprise version to check if it is prior to 4.8.0.
  2. Access the official vendor advisory at https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9.
  3. Download and apply the update to version 4.8.0 or later.
  4. Restrict adjacent network access to management segments using strict firewall rules and VLAN segmentation.