← Vulnerability feed

Vulnerability record · CVE-2026-46735 · published 25 June 2026

CVE-2026-46735: Dell display and peripheral manager os command injection vulnerability

Dell · Display And Peripheral Manager

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

7.8 CVSS 3.1 High EPSS 0.82% · top 44.4% CWE-78 · OS command injection
7.8CVSS 3.1 base score
0.82%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
5 Aug 2026Last modified by NVD

Description

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/kbdoc/en-hk/000475656/dsa-2026-267?msockid=3021cac2195069ed3194ddad186a68f9 Vendor Advisory

Track CVE-2026-46735 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2026-59914Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low pri…EPSS 0.18%7.8CVE-2026-59916Dell display and peripheral manager authentication bypass by spoofing vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attac…EPSS 0.15%7.8CVE-2026-59917Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attac…EPSS 0.15%7.8CVE-2026-46731Dell display and peripheral manager authentication bypass by spoofing vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low pri…EPSS 0.18%7.8CVE-2026-59912Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged atta…EPSS 0.15%7.8CVE-2026-59913Dell display and peripheral manager missing authentication for critical function vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A…EPSS 0.17%7.8CVE-2026-46733Dell display and peripheral manager improper access control vulnerabilityDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacke…EPSS 0.15%7.8CVE-2026-46734Dell display and peripheral manager improper certificate validation vulnerabilityDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged att…EPSS 0.09%

Source: NIST National Vulnerability Database (record CVE-2026-46735), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.