{"id":"CVE-2026-91914","aliases":[],"cve":{"records":[{"id":"CVE-2026-91914","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.436Z","published":"2026-10-30T13:37:02.727Z","modified":"2026-10-30T15:07:32.309Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-10-30T13:37:02.727Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T15:07:32.309Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-290","description":"CWE-290: Authentication Bypass by Spoofing","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T14:22:28.250710Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.","titleSource":"dell","descriptionSource":"dell","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.","score":7.1,"severity":"high","published":"2026-10-30T13:37:02.727Z","modified":"2026-10-30T15:07:32.309Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"OpenManage Enterprise","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"4.8.0 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91914"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9"],"sources":[{"name":"CVE","id":"CVE-2026-91914","modified":"2026-10-30T15:07:32.309Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91914"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","score":7.1}],"sourceAffected":[],"observedAt":"2026-10-30T15:33:39.378Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T03:00:34.533Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T15:00:42.969Z","attemptedAt":"2026-10-30T15:00:42.969Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T15:00:37.411Z","attemptedAt":"2026-10-30T15:00:37.411Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T15:00:37.999Z","attemptedAt":"2026-10-30T15:00:37.999Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T15:00:36.590Z","attemptedAt":"2026-10-30T15:00:36.590Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-113943","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113943","modified":"Oct 30, 2026, 1:37:02 PM","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","checkedAt":"2026-10-30T15:00:37.999Z"},{"source":"NVD","id":"CVE-2026-91914","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91914","modified":"2026-10-30T14:17:10.900","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","checkedAt":"2026-10-30T15:00:42.969Z"}],"aiSummary":{"text":"Dell OpenManage Enterprise versions prior to 4.8.0 have an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could exploit this, potentially leading to Session theft. The vulnerability is identified as CWE-290.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T14:56:26.613Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91914"}]}}