Information Exposure Vulnerability in Dell Terraform Provider for OME
CVE-2026-91883

4.3MEDIUM

Key Information:

Vendor

Dell
Status
Terraform Provider For Ome
Vendor
CVE Published:
14 October 2026

What is CVE-2026-91883?

The Dell Terraform Provider for OME has a vulnerability in its provider configuration component that may allow low privileged attackers with remote access to exploit it. This can result in the exposure of sensitive information, potentially compromising system integrity and user privacy. It is crucial for users to apply security updates promptly to mitigate such risks.

Affected Version(s)

Terraform Provider for OME 0 < 1.2.4 or later

References

https://www.dell.com/support/kbdoc/en-in/000515444/dsa-20...
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.