{"id":"CVE-2026-91914","kind":"vulnerability","aliases":["CVE-2026-91914"],"related":[],"title":"Dell OpenManage Enterprise: authentication bypass by spoofing lets attackers steal sessions","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an authentication bypass by spoofing flaw. An unauthenticated attacker on the adjacent network could potentially steal a session.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","on-prem","openmanage-enterprise","self-hosted"],"not_affected_if":["console-not-on-adjacent-network","version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; compare it with `4.8.0`.\n- Confirm whether the management console is reachable from networks outside the administrators' segment.","fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later.","status":"open","published_at":"2026-10-30T14:17:10+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","triaged_at":"2026-10-30T14:32:41+00:00","updated_at":"2026-10-30T14:32:41+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-30T14:32:41Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later.","reach":"network","title":"Dell OpenManage Enterprise: authentication bypass by spoofing lets attackers steal sessions","impact":"high","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain an authentication bypass by spoofing flaw. An unauthenticated attacker on the adjacent network could potentially steal a session.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage-enterprise","self-hosted","on-prem"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"attacker steals an active administrator session on the console","analyst_note":"Check the Dell security advisory for affected version details, exploitation status and any workaround; the NVD entry alone does not confirm the attack conditions.","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; compare it with `4.8.0`.\n- Confirm whether the management console is reachable from networks outside the administrators' segment.","plain_action":"","needs_analyst":true,"not_affected_if":["version-4.8.0-or-later","console-not-on-adjacent-network"],"who_is_affected":"Teams running Dell OpenManage Enterprise before 4.8.0 whose management console is reachable from an adjacent network segment. The sources do not describe further configuration conditions. Deployments where the console is only reachable from a tightly restricted administrative network are less exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000702,"input_tokens":4123,"output_tokens":580,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91914':14A,17A '4.8.0':34B,60C 'access':74C 'adjac':47B,72C 'attack':9A,44B,70C 'authent':4A,37B,63C 'bypass':5A,38B,64C 'contain':35B,61C 'could':49B,75C 'cve':12A,15A 'dell':1A,18B,29B,54C 'enterpris':3A,25B,31B,56C 'exploit':77C 'flaw':41B 'host':28B 'infrastructur':19B 'lead':80C 'let':8A 'network':48B,73C 'on-prem':20B 'openmanag':2A,24B,30B,55C 'openmanage-enterpris':23B 'potenti':50B,76C 'prem':22B 'prior':58C 'self':27B 'self-host':26B 'session':11A,53B,82C 'spoof':7A,40B,66C 'steal':10A,51B 'theft':83C 'unauthent':43B,69C 'version':32B,57C 'vulner':67C,79C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell OpenManage Enterprise before 4.8.0 whose management console is reachable from an adjacent network segment. The sources do not describe further configuration conditions. Deployments where the console is only reachable from a tightly restricted administrative network are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91914","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91914","severity":null,"published_at":"2026-10-30T14:17:10+00:00","modified_at":"2026-10-30T14:17:10+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","fetched_at":"2026-10-30T14:30:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}