CVE-2026-91900

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 52/100
Published: 2026-11-02 Modified: 2026-11-03 First seen: 2026-11-02 Status: active

Attack Surface

Network No Auth Scope Change

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Required
S: Changed
C: Low
I: Low
A: Low

Description

Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
Dell Alienware Command Center (AWCC) 0 < 6.14.54.0
Dell Alienware Command Center (AWCC) 0 < 6.14.54.0
Dell Alienware Command Center (AWCC) 0 < 6.14.54.0

Bug Bounty Relevance

52 / 100
✓ Network accessible
✓ No authentication

CVSS Score

5.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS — Exploitation Probability

0.25%
Raw Score 0.002510
Percentile 16.6%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00251
2026-11-04
0.00251
2026-11-03
0.00251

Intelligence Sources

mitre ref →
nvd ref →