Injection Vulnerability in Dell OpenManage Ansible Modules
CVE-2026-91878

7.6HIGH

Key Information:

Vendor

Dell
Status
Openmanage Ansible Modules
Vendor
CVE Published:
11 November 2026

What is CVE-2026-91878?

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, are impacted by an XML injection vulnerability. This occurs due to improper handling of special elements in output used by a downstream component during XML data conversion. A low-privileged attacker with remote access could exploit this flaw, leading to potential XML content manipulation. Attackers may inject malicious content, resulting in XML parsing errors and possibly affecting system integrity.

Affected Version(s)

OpenManage Ansible Modules 0 < 11.0.0 or later

References

https://www.dell.com/support/kbdoc/en-in/000515420/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.