CVE-2026-91914: dell openmanage_enterprise

CVSS 7.1 (high) · published 2026-10-30

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.

Affected products (NVD): dell openmanage_enterprise

Fixed in (NVD): 4.8.0

Weakness: CWE-290

Source: NVD CVE-2026-91914

References

• https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.