Live › vulnerability › CVE-2026-91915
Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize special characters in output passed to a downstream component. A high-privileged attacker on the adjacent network can use this to inject script.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 14:30 UTC. All times on this page are UTC.
Teams running Dell OpenManage Enterprise for server management on their network before version 4.8.0. The attacker must already hold high privileges and have adjacent network access, so exposure is limited to internal admins. Systems on newer versions can skip it.
No product ranges from the sources yet.
4.8.0.4.8.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
This page as .md · .json · in your agent: get_signal("CVE-2026-91915")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.