CVE-2026-91915

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special…

Risk score: 41/100
CVSS: 6.8 v3.1
Published: 30 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
Affected: See advisory
Fix: Upgrade the product to 4.8.0 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.8 medium

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Original description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.

Last activity 30 Oct 2026. Patch Forecast updates every hour.