Improper Verification of Cryptographic Signature in Dell OpenManage Enterprise
CVE-2026-91905

6.4MEDIUM

Key Information:

Vendor

Dell
Status
Openmanage Enterprise
Vendor
CVE Published:
2 November 2026

What is CVE-2026-91905?

Dell OpenManage Enterprise versions before 4.8.0 contain a vulnerability that improperly verifies cryptographic signatures. This flaw could allow an attacker with high-level local access to exploit the system, potentially granting unauthorized filesystem access. Prompt action is recommended to mitigate risks associated with this vulnerability and ensure the integrity of the system.

Affected Version(s)

OpenManage Enterprise 0 < 4.8.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.