Information Disclosure Vulnerability in Dell OpenManage Enterprise
CVE-2026-91912

7.3HIGH

Key Information:

Vendor

Dell
Status
Openmanage Enterprise
Vendor
CVE Published:
30 October 2026

What is CVE-2026-91912?

Dell OpenManage Enterprise, versions prior to 4.8.0, has a vulnerability that stems from the use of a hard-coded cryptographic key. This weakness allows a low privileged attacker with local access to potentially exploit the system, leading to unauthorized information disclosure. It is crucial for users of affected versions to apply the necessary updates to mitigate this risk.

Affected Version(s)

OpenManage Enterprise 0 < 4.8.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.