Live › vulnerability › CVE-2026-91901
Dell Alienware Command Center, before version 6.14.54.0, has an improper authorization flaw in its handler for custom URL schemes. A low-privileged attacker with remote access could potentially cause client-side request forgery, making the app send requests the attacker chooses.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
Owners of Alienware machines running Alienware Command Center before 6.14.54.0. The sources describe a remote, low-privileged attacker reaching the custom URL handler; they do not say whether a user click or a specific configuration is needed. Teams that do not run Alienware machines can skip it.
No product ranges from the sources yet.
6.14.54.0 are listed as affected6.14.54.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery.
This page as .md · .json · in your agent: get_signal("CVE-2026-91901")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.