CVE-2026-91906: Medium severity Dell OpenManage Enterprise vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Systems running Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. Exploitation requires local access and a low-privileged account, so remote-only attackers are not described as able to exploit this issue.
What level of access does an attacker need?
An attacker needs local access and low privileges. No user interaction is required according to the supplied vector.
What is the impact if exploited?
Successful exploitation could bypass a protection mechanism. The provided impact vector indicates high confidentiality impact, with no integrity or availability impact stated.
What remediation is indicated?
Update Dell OpenManage Enterprise to version 4.8.0 or later, since versions prior to 4.8.0 are identified as affected.