CVE-2026-91914

HIGH
MEDIUM Priority: 0.00 BB Relevance: 59/100
Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: High
A: None

Description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.

Affected Software (2)

VendorProductVersion
Dell OpenManage Enterprise 0 < 4.8.0 or later
Dell OpenManage Enterprise 0 < 4.8.0 or later

Bug Bounty Relevance

59 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →