CVE-2026-91907: dell openmanage_enterprise

CVSS 6.8 (medium) · published 2026-11-02

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering

Affected products (NVD): dell openmanage_enterprise

Fixed in (NVD): 4.8.0

Weakness: CWE-79

Source: NVD CVE-2026-91907

References

• https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.