Dell OpenManage Integration with Microsoft Windows Admin Center: OS command injection
Summary
Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) contains an OS command injection flaw (CWE-78). An attacker with a low-privilege account and remote network access can run commands on the host, which the CVSS rates as high impact for confidentiality, integrity and availability. A compromised Windows Admin Center host typically manages servers and hypervisors, so the impact can extend beyond that single machine.
Affected
- Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC): all versions prior to 3.7.0
- Microsoft Windows Admin Center 2606 shipped the extension at version 3.6.0, so 3.6.x and earlier are affected (Microsoft release notes)
Fixed in
- Version 3.7.0 or later (Dell advisory DSA-2026-442)
Workaround
Unknown. Dell has documented no workaround. Patching to version 3.7.0 or later is the fix.
Exploitation
- CISA SSVC assessment: exploitation none, not automatable, total technical impact
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the time of research
- No public proof of concept found; this does not prove that none exists
Our recommendation
- Inventory Windows Admin Center hosts and the OMIMSWAC version; anything below 3.7.0 is affected
- Patch to version 3.7.0 or later from Dell's official download site
- Restrict access to the Windows Admin Center gateway to a management VLAN or VPN; do not expose it to the internet or broad user networks
- Limit admin accounts to the minimum needed
- Review Windows Admin Center logins and host activity for unexpected commands
- Recheck the CISA KEV catalog and Dell's advisory for changes
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Dell DSA-2026-442 security advisory www.dell.com
- Canadian Cyber Centre AV26-1027 Dell advisory www.cyber.gc.ca
- Microsoft Windows Admin Center 2606 release notes techcommunity.microsoft.com
- Dell OMIMSWAC update servers guide www.dell.com
- Dell support article for OMIMSWAC www.dell.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 22:15.
Original description (NVD)
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.