CVE-2026-91917: Input Validation
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Dell OpenManage Enterprise deployments running versions earlier than 4.8.0 are affected. Exploitation requires an attacker to have adjacent-network access and low-privileged access.
What level of access does an attacker need, and is user interaction required?
The attacker must already have low-privileged access and be positioned on an adjacent network. No user interaction is required.
What is the potential impact if exploited?
Successful exploitation could lead to code execution, with high potential impact to confidentiality, integrity, and availability.
What version addresses the issue?
The vulnerability affects versions prior to 4.8.0; upgrading to version 4.8.0 or later addresses the affected version range.