Dell OpenManage Enterprise Multiple Vulnerabilities Advisory (RCE/XSS/SSRF/SQLi)

Vulnerability Overview Dell OpenManage Enterprise contains multiple security vulnerabilities that may be exploited by malicious users to compromise the system. The specific vulnerabilities are: 1. CVE-2026-54793: Cross-Site Scripting (XSS) vulnerability, which low-privilege attackers may exploit via remote access, resulting in information disclosure. 2. CVE-2026-54794: Server-Side Request Forgery (SSRF) vulnerability, which unauthorized attackers may exploit via remote access, resulting in information disclosure. 3. CVE-2026-54795: OS Command Injection vulnerability, which low-privilege attackers may exploit via remote access, resulting in command execution. 4. CVE-2026-54796: OS Command Injection vulnerability, which high-privilege attackers may exploit via remote access, resulting in command execution. 5. CVE-2026-56088: SQL Injection vulnerability, which low-privilege attackers may exploit via remote access, resulting in script injection. 6. CVE-2026-70421: Privilege Management vulnerability, which high-privilege attackers may exploit via remote access, resulting in privilege escalation. 7. CVE-2026-70422: SQL Injection vulnerability, which low-privilege attackers may exploit via remote access, resulting in script injection. 8. CVE-2026-70423: XML External Entity (XXE) vulnerability, which low-privilege attackers may exploit via remote access, resulting in information disclosure. 9. CVE-2026-70424: Path Traversal vulnerability, which low-privilege attackers may exploit via remote access, resulting in information disclosure. 10. CVE-2026-71176: SQL Injection vulnerability, which low-privilege attackers may exploit via remote access, resulting in information disclosure. Impact Scope Affected Product: Dell OpenManage Enterprise Affected Versions: Versions prior to 4.7.0 Fixed Version: 4.7.0 or later Remediation Fixed Version: Upgrade to Dell OpenManage Enterprise 4.7.0 or later. Related Link: Dell OpenManage Enterprise Driver Details Additional Information CVSS Base Scores: The CVSS base scores for the vulnerabilities range from 4.6 to 8.8. For specific scores, refer to the detailed table on the page. Third-Party Component Vulnerabilities: The page also lists vulnerabilities in multiple third-party components, including the Go standard library, glibc, yamlf for Go, pgx, and golang.org/x/net. For specific vulnerability IDs and links, refer to the detailed table on the page. Acknowledgments Acknowledged Individuals: CVE-2026-54793, CVE-2026-56088, CVE-2026-70421, CVE-2026-70422, CVE-2026-70423, CVE-2026-70424, and CVE-2026-71176 were reported by Wind39 and Huynh Dinh Vu. Related Links Dell Security Advisories and Notifications Dell Vulnerability Response Policy CVSS Scoring Guide Legal Disclaimer Security information provided by Dell Technologies is for reference only and carries no express or implied warranties. Users should assess risks based on their own circumstances and take appropriate measures. Affected Product Dell EMC OpenManage Enterprise Provide Feedback Users can rate the article and provide feedback to help improve the content. --- The above is a summary of key vulnerability information from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

Dell OpenManage Enterprise Multiple Vulnerabilities Advisory (RCE/XSS/SSRF/SQLi)