Dell OpenManage OMNI Vulnerability Allows Information Exposure

Multiple vulnerabilities have been identified in Dell OpenManage Network Integration (OMNI) that could lead to unauthorized access, information disclosure, command execution, privilege escalation, or denial of service. The primary vendor-tracked issue is an Improper Authentication flaw affecting Dell OMNI versions prior to 3.9, where a low-privileged attacker with remote access could potentially exploit the weakness to expose information. Dell has released OMNI 3.9 or later to remediate the issue. In addition, the update rolls in fixes for numerous third-party components bundled with the appliance/software stack (e.g., redis, libxml2, systemd, sudo, and Linux kernel), meaning unpatched deployments inherit a broad set of upstream risks.

CVE
CVE-2026-22764
Multiple additional third-party CVEs are addressed as part of component updates included with OMNI 3.9.

Targeting / Delivery Mechanism
Exploitation depends on access paths to OMNI services and integrated components, particularly environments with reachable management interfaces or exposed services.

Execution Technique
The key proprietary weakness is improper authentication; third-party issues vary by component and may include memory corruption, injection, or privilege escalation.

Persistence / Deployment
If attackers gain access, they may maintain persistence via credential abuse, configuration changes, or deployment of additional tooling depending on the environment.