---
id: "CVE-2026-91900"
kind: "vulnerability"
aliases: ["CVE-2026-91900"]
title: "Dell Alienware Command Center: custom URL handler lets remote attackers run commands"
severity: "medium"
cvss: 5.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["alienware", "dell", "other", "windows"]
not_affected_if: ["app-not-installed"]
published_at: "2026-11-02T20:18:04+00:00"
first_seen_at: "2026-11-02T20:35:38+00:00"
updated_at: "2026-11-02T20:36:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91900", "first_seen_at": "2026-11-02T20:35:38+00:00"}]
---

# Dell Alienware Command Center: custom URL handler lets remote attackers run commands

Alienware Command Center up to and including 6.14.20.0 has an improper authorization flaw in its custom URL scheme handler. A remote, unauthenticated attacker could use it to run commands, launch phishing, or execute code remotely.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Alienware Command Center version against `6.14.20.0` in Settings or Apps and features on Windows

## Fix

- Dell Alienware Command Center: move to a version later than `6.14.20.0`; the exact fixed version is unknown from the sources

## Timeline

- 2026-11-02T20:35:38+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91900

## From the sources

Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_