CVE-2026-91878: High severity vulnerability
Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Ansible Modules versions 6.0.0 through 10.0.3 are affected. The issue is in the XML data conversion component.
What access does an attacker need?
An attacker needs remote access and low-privileged access. No user interaction is required.
What could successful exploitation cause?
Successful exploitation could result in XML injection, malicious content injection, and XML parsing errors. The reported impact includes low confidentiality impact, high integrity impact, and low availability impact.