{"id":"CVE-2026-91900","aliases":[],"cve":{"records":[{"id":"CVE-2026-91900","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.435Z","published":"2026-11-02T20:04:48.691Z","modified":"2026-11-03T15:39:31.039Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-02T20:04:48.691Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-03T15:39:31.039Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000512248/dsa-2026-429-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-939","description":"CWE-939: Improper Authorization in Handler for Custom URL Scheme","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-03T04:56:18.372660Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL…","titleSource":"dell","descriptionSource":"dell","description":"Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.","score":5.8,"severity":"medium","published":"2026-11-02T20:04:48.691Z","modified":"2026-11-03T15:39:31.039Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"Alienware Command Center (AWCC)","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.14.54.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91900"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-us/000512248/dsa-2026-429-security-update-for-dell-alienware-command-center-6-x-for-multiple-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91900","modified":"2026-11-03T15:39:31.039Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91900"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","score":5.8}],"sourceAffected":[],"observedAt":"2026-11-03T15:46:10.268Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:35:33.875Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-03T00:35:33.082Z","attemptedAt":"2026-11-03T00:35:33.082Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-03T00:35:33.550Z","attemptedAt":"2026-11-03T00:35:33.550Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-03T00:35:33.701Z","attemptedAt":"2026-11-03T00:35:33.701Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-03T00:35:33.171Z","attemptedAt":"2026-11-03T00:35:33.171Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-91900","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91900","modified":"2026-11-02T20:18:04.677","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","checkedAt":"2026-11-03T00:35:33.082Z"},{"source":"GitHub Advisory Database","id":"GHSA-xjff-72j6-f43p","url":"https://github.com/advisories/GHSA-xjff-72j6-f43p","modified":"2026-11-02T21:32:05Z","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","checkedAt":"2026-11-03T00:35:33.550Z"},{"source":"ENISA EUVD","id":"EUVD-2026-115455","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115455","modified":"Nov 2, 2026, 8:04:48 PM","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","checkedAt":"2026-11-03T00:35:33.701Z"}],"aiSummary":{"text":"Dell Alienware Command Center versions up to 6.14.20.0 have an Improper Authorization weakness. An unauthenticated attacker with remote access may exploit this, potentially leading to command execution or phishing attacks. The exact impact is uncertain.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-02T20:21:10.279Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91900"}]}}