CVE-2026-91901

LOW
INFO Priority: 0.01 BB Relevance: 47/100
Published: 2026-11-02 Modified: 2026-11-04 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Unchanged
C: Low
I: None
A: None

Description

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Dell Alienware Command Center (AWCC) 0 < 6.14.54.0
Dell Alienware Command Center (AWCC) 0 < 6.14.54.0

Bug Bounty Relevance

47 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

3.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.14%
Raw Score 0.001430
Percentile 3.6%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00143
2026-11-04
0.00143
2026-11-03
0.00143

Intelligence Sources

mitre ref →
nvd ref →