Improper Verification of Cryptographic Signature in Dell OpenManage Enterprise
CVE-2026-91908

5.7MEDIUM

Key Information:

Vendor

Dell
Status
Openmanage Enterprise
Vendor
CVE Published:
2 November 2026

What is CVE-2026-91908?

Dell OpenManage Enterprise versions prior to 4.8.0 are vulnerable to an exploit that stems from improper verification of cryptographic signatures. This flaw allows attackers with high privileges and adjacent network access to potentially execute arbitrary code, posing a significant security risk to affected systems. Organizations using these versions are advised to apply the latest updates to mitigate the risk.

Affected Version(s)

OpenManage Enterprise 0 < 4.8.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.