{"id":"CVE-2026-91898","kind":"vulnerability","aliases":["CVE-2026-91898"],"related":[],"title":"Dell Alienware Command Center: unsigned updates let nearby attackers run code","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.","summary":"Dell Alienware Command Center, a utility for Alienware laptops and desktops, does not properly verify cryptographic signatures on some content. An unauthenticated attacker on the same local network can potentially run arbitrary code and gain elevated privileges.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["alienware","command-center","dell","other","windows"],"not_affected_if":["command-center-not-installed","version-6.14.54.0-or-later"],"how_to_check":"- Open Alienware Command Center and check its version under the About section; `unknown` if the sources do not say where to find it.\n- Confirm whether the installed version is below `6.14.54.0`.","fix":"- Dell Alienware Command Center: `6.14.54.0` or later","status":"open","published_at":"2026-11-02T20:18:04+00:00","first_seen_at":"2026-11-02T20:35:38+00:00","triaged_at":"2026-11-02T20:36:31+00:00","updated_at":"2026-11-02T20:36:31+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-02T20:36:31Z","model":"claude-haiku-5-5","output":{"fix":"- Dell Alienware Command Center: `6.14.54.0` or later","reach":"network","title":"Dell Alienware Command Center: unsigned updates let nearby attackers run code","impact":"high","summary":"Dell Alienware Command Center, a utility for Alienware laptops and desktops, does not properly verify cryptographic signatures on some content. An unauthenticated attacker on the same local network can potentially run arbitrary code and gain elevated privileges.","audience":"everyone","category":"other","nicknames":[],"who_cares":["alienware","dell","windows","command-center"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"attacker runs code on the machine with elevated privileges","analyst_note":"Confirm the affected component (update channel or signature check) and the Dell advisory's exact fixed version and remediation steps at Dell's security advisory page.","how_to_check":"- Open Alienware Command Center and check its version under the About section; `unknown` if the sources do not say where to find it.\n- Confirm whether the installed version is below `6.14.54.0`.","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","needs_analyst":true,"not_affected_if":["command-center-not-installed","version-6.14.54.0-or-later"],"who_is_affected":"Alienware owners and IT staff who run Alienware Command Center on Windows machines, especially on shared or public networks where an attacker could be adjacent. The sources do not say which exact update mechanism is affected, so unknown. Machines without Alienware Command Center installed can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000712,"input_tokens":4147,"output_tokens":595,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91898':14A,17A '6.14.54.0':70C 'access':85C 'adjac':83C 'alienwar':2A,18B,26B,32B,63C 'arbitrari':56B,93C 'attack':9A,47B,81C 'awcc':66C 'center':4A,21B,28B,65C 'code':11A,57B,94C 'command':3A,20B,27B,64C 'command-cent':19B 'contain':71C 'content':44B 'could':86C 'cryptograph':40B,76C 'cve':12A,15A 'dell':1A,22B,25B,62C 'desktop':35B 'elev':60B,97C 'execut':95C 'exploit':88C 'gain':59B 'improp':73C 'laptop':33B 'lead':91C 'let':7A 'local':51B 'nearbi':8A 'network':52B,84C 'potenti':54B,87C 'prior':68C 'privileg':61B,99C 'proper':38B 'run':10A,55B 'signatur':41B,77C 'unauthent':46B,80C 'unsign':5A 'updat':6A 'util':30B 'verif':74C 'verifi':39B 'version':67C 'vulner':78C,90C 'window':24B","nicknames":[],"mitigations":[],"who_affected":"Alienware owners and IT staff who run Alienware Command Center on Windows machines, especially on shared or public networks where an attacker could be adjacent. The sources do not say which exact update mechanism is affected, so unknown. Machines without Alienware Command Center installed can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Alienware Command Center to version 6.14.54.0 or later.","pkeys":[],"ptokens":[],"labels":["alienware","commandcenter","dell","high","other","windows"],"first_public_at":"2026-11-02T20:18:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91898","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91898","severity":null,"published_at":"2026-11-02T20:18:04+00:00","modified_at":"2026-11-02T20:18:04+00:00","first_seen_at":"2026-11-02T20:35:38+00:00","fetched_at":"2026-11-02T20:35:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}