CVE-2026-91876: XEE
Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity Reference vulnerability in the XML parsing component. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low-level privileges on a system running an affected Dell OpenManage Ansible Modules version. The provided information does not indicate that it can be exploited remotely or without authentication.
What is the likely impact of successful exploitation?
Successful exploitation could expose information. The provided severity vector indicates confidentiality impact but no stated integrity or availability impact.
Which versions should be investigated?
Investigate Dell OpenManage Ansible Modules versions 2.0.4 through 10.0.3, which are identified as affected.