{"id":"CVE-2026-91898","aliases":[],"cve":{"records":[{"id":"CVE-2026-91898","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.435Z","published":"2026-11-02T19:54:58.490Z","modified":"2026-11-03T15:39:31.747Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-02T19:54:58.490Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-03T15:39:31.747Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000512248/dsa-2026-429-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-347","description":"CWE-347: Improper Verification of Cryptographic Signature","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-03T04:56:12.749439Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability.","titleSource":"dell","descriptionSource":"dell","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.","score":8.1,"severity":"high","published":"2026-11-02T19:54:58.490Z","modified":"2026-11-03T15:39:31.747Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"Alienware Command Center (AWCC)","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.14.54.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91898"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-us/000512248/dsa-2026-429-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91898","modified":"2026-11-03T15:39:31.747Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91898"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.1}],"sourceAffected":[],"observedAt":"2026-11-03T15:46:08.350Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-03T01:00:39.664Z","attemptedAt":"2026-11-03T01:00:39.664Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-03T01:00:37.359Z","attemptedAt":"2026-11-03T01:00:37.359Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-03T01:00:37.535Z","attemptedAt":"2026-11-03T01:00:37.535Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-03T01:00:36.766Z","attemptedAt":"2026-11-03T01:00:36.766Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-q6rf-9rcc-v67w","url":"https://github.com/advisories/GHSA-q6rf-9rcc-v67w","modified":"2026-11-02T21:32:05Z","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-03T01:00:37.359Z"},{"source":"ENISA EUVD","id":"EUVD-2026-115432","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115432","modified":"Nov 2, 2026, 7:54:58 PM","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-03T01:00:37.535Z"},{"source":"NVD","id":"CVE-2026-91898","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91898","modified":"2026-11-02T20:18:04.390","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-03T01:00:39.664Z"}],"aiSummary":{"text":"Dell Alienware Command Center versions prior to 6.14.54.0 contain an Improper Verification of Cryptographic Signature vulnerability, which an unauthenticated attacker with adjacent network access could potentially exploit. The stated impact is Arbitrary Code Execution and Elevation of Privilege.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-02T20:16:06.294Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91898"}]}}