CVE-2026-91877: High severity vulnerability
Published Nov 11, 2026
·Updated
Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic vulnerability in the OData filter processing component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized data access, authorization bypass, and denial of service.
Event History
Nov 11, 2026
CVE Published
via MITRE·06:26 PM
Data Sourced
via MITRE·06:26 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 are affected. The issue is in the OData filter processing component.
2
What access does an attacker need?
An attacker needs remote access and low-privileged access. No user interaction is required.
3
What could successful exploitation allow?
Successful exploitation could lead to unauthorized data access, authorization bypass, and denial of service.