CVE-2026-91914: High severity vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Which deployments are exposed to this vulnerability?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. Exploitation requires adjacent network access, so exposure is limited to attackers able to reach the affected system from the same or a directly connected network segment.
Does an attacker need an account or user interaction to exploit it?
No. The vulnerability can potentially be exploited by an unauthenticated attacker and does not require user interaction.
What is the impact of successful exploitation?
Successful exploitation could lead to session theft. The supplied severity vector indicates high integrity impact and low confidentiality impact, with no availability impact.
What version should be used to remediate the issue?
Upgrade Dell OpenManage Enterprise to version 4.8.0 or later. Versions prior to 4.8.0 are identified as affected.