{"id":"CVE-2026-91915","kind":"vulnerability","aliases":["CVE-2026-91915"],"related":[],"title":"Dell OpenManage Enterprise: injection flaw lets privileged adjacent user inject scripts","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.","summary":"Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize special characters in output passed to a downstream component. A high-privileged attacker on the adjacent network can use this to inject script.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","openmanage-enterprise","self-hosted"],"not_affected_if":["no-adjacent-access","version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; unknown if the sources give a specific command.\n- Look for any version below `4.8.0`.","fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later.","status":"open","published_at":"2026-10-30T14:17:11+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","triaged_at":"2026-10-30T14:32:45+00:00","updated_at":"2026-10-30T14:32:45+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-30T14:32:45Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later.","reach":"network","title":"Dell OpenManage Enterprise: injection flaw lets privileged adjacent user inject scripts","impact":"medium","summary":"Dell OpenManage Enterprise versions before 4.8.0 fail to neutralize special characters in output passed to a downstream component. A high-privileged attacker on the adjacent network can use this to inject script.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage-enterprise","self-hosted"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker injects script into the management application's output","analyst_note":"","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; unknown if the sources give a specific command.\n- Look for any version below `4.8.0`.","plain_action":"","needs_analyst":false,"not_affected_if":["version-4.8.0-or-later","no-adjacent-access"],"who_is_affected":"Teams running Dell OpenManage Enterprise for server management on their network before version 4.8.0. The attacker must already hold high privileges and have adjacent network access, so exposure is limited to internal admins. Systems on newer versions can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000667,"input_tokens":4138,"output_tokens":506,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91915':14A,17A '4.8.0':31B,65C 'access':89C 'adjac':8A,51B,87C 'attack':48B,85C 'charact':36B 'compon':43B,79C 'contain':66C 'could':90C 'cve':12A,15A 'dell':1A,18B,26B,59C 'downstream':42B,78C 'element':72C 'enterpris':3A,22B,28B,61C 'exploit':92C 'fail':32B 'flaw':5A 'high':46B,83C 'high-privileg':45B 'host':25B 'improp':68C 'infrastructur':19B 'inject':4A,10A,57B,80C,98C 'lead':95C 'let':6A 'network':52B,88C 'neutral':34B,69C 'openmanag':2A,21B,27B,60C 'openmanage-enterpris':20B 'output':38B,74C 'pass':39B 'potenti':91C 'prior':63C 'privileg':7A,47B,84C 'script':11A,58B,97C 'self':24B 'self-host':23B 'special':35B,71C 'use':54B,75C 'user':9A 'version':29B,62C 'vulner':81C,94C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell OpenManage Enterprise for server management on their network before version 4.8.0. The attacker must already hold high privileges and have adjacent network access, so exposure is limited to internal admins. Systems on newer versions can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:17:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91915","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91915","severity":null,"published_at":"2026-10-30T14:17:11+00:00","modified_at":"2026-10-30T14:17:11+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","fetched_at":"2026-10-30T14:30:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}