{"id":"CVE-2026-91899","kind":"vulnerability","aliases":["CVE-2026-91899"],"related":[],"title":"Dell Alienware Command Center: unsigned update code can run with elevated rights","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution.","summary":"Alienware Command Center versions before 6.14.54.0 do not properly verify cryptographic signatures. A local attacker with high privileges can use this to escalate privileges and run arbitrary code.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["alienware","dell","vendor","windows"],"not_affected_if":["no-alienware-hardware","version-6.14.54.0-or-later"],"how_to_check":"- Check the installed Alienware Command Center version in the application's About screen or Apps list\n- Compare the installed version against `6.14.54.0`","fix":"- Alienware Command Center: move to `6.14.54.0` or later","status":"open","published_at":"2026-11-02T20:18:04+00:00","first_seen_at":"2026-11-02T20:35:38+00:00","triaged_at":"2026-11-02T20:36:38+00:00","updated_at":"2026-11-02T20:36:38+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-02T20:36:38Z","model":"claude-haiku-5-5","output":{"fix":"- Alienware Command Center: move to `6.14.54.0` or later","reach":"local","title":"Dell Alienware Command Center: unsigned update code can run with elevated rights","impact":"high","summary":"Alienware Command Center versions before 6.14.54.0 do not properly verify cryptographic signatures. A local attacker with high privileges can use this to escalate privileges and run arbitrary code.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["windows","alienware","dell"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local attacker gains elevated privileges and runs arbitrary code","analyst_note":"","how_to_check":"- Check the installed Alienware Command Center version in the application's About screen or Apps list\n- Compare the installed version against `6.14.54.0`","plain_action":"","needs_analyst":false,"not_affected_if":["version-6.14.54.0-or-later","no-alienware-hardware"],"who_is_affected":"Alienware Command Center installs older than 6.14.54.0 are affected. The attacker needs high privileges on the local machine first, so the risk is mainly to shared or managed Alienware machines. Machines already on 6.14.54.0 or later are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000656,"input_tokens":4142,"output_tokens":484,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-91899':15A,18A '6.14.54.0':28B,59C 'access':74C 'alienwar':2A,19B,23B,52C 'arbitrari':49B,86C 'attack':37B,71C 'awcc':55C 'center':4A,25B,54C 'code':7A,50B,87C 'command':3A,24B,53C 'contain':60C 'could':75C 'cryptograph':33B,65C 'cve':13A,16A 'dell':1A,20B,51C 'elev':11A,82C 'escal':45B 'execut':88C 'exploit':77C 'high':39B,69C 'improp':62C 'lead':80C 'local':36B,73C 'potenti':76C 'prior':57C 'privileg':40B,46B,70C,84C 'proper':31B 'right':12A 'run':9A,48B 'signatur':34B,66C 'unsign':5A 'updat':6A 'use':42B 'vendor':21B 'verif':63C 'verifi':32B 'version':26B,56C 'vulner':67C,79C 'window':22B","nicknames":[],"mitigations":[],"who_affected":"Alienware Command Center installs older than 6.14.54.0 are affected. The attacker needs high privileges on the local machine first, so the risk is mainly to shared or managed Alienware machines. Machines already on 6.14.54.0 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["alienware","dell","medium","vendor","windows"],"first_public_at":"2026-11-02T20:18:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91899","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91899","severity":null,"published_at":"2026-11-02T20:18:04+00:00","modified_at":"2026-11-02T20:18:04+00:00","first_seen_at":"2026-11-02T20:35:38+00:00","fetched_at":"2026-11-02T20:35:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}