CVE-2026-91903 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell OpenManage Enterprise deployments should assess exposure and verify patch status. This vulnerability affects Dell OpenManage Enterprise versions prior to 4.8.0 and requires attention from system administrators and security teams to assess exposure and verify patch status. The vulnerability has a medium severity and a CVSS score of 6.1.

Why it matters

CVE-2026-91903 is a medium-severity path traversal vulnerability in Dell OpenManage Enterprise that requires attention from system administrators and security teams to assess exposure and verify patch status.

• Potential filesystem access for attackers with high privileges and adjacent network access
• Need to verify patch status for OpenManage Enterprise versions prior to 4.8.0
• Possible exploitation attempts may be monitored and mitigated

Technical summary

Dell OpenManage Enterprise versions prior to 4.8.0 contain a path traversal vulnerability that could allow a high-privileged attacker with adjacent network access to gain filesystem access. This vulnerability has a medium severity and requires attention from system administrators and security teams to assess exposure and verify patch status. The vulnerability has a CVSS score of 6.1 and is classified as a medium-severity path traversal vulnerability. The CVE record and NVD entry provide details on the path traversal vulnerability in Dell OpenManage Enterprise.

Defensive priority

Assess exposure and verify patch status for Dell OpenManage Enterprise versions prior to 4.8.0.

Recommended defensive actions

• Review and apply Dell's security update for OpenManage Enterprise
• Verify system configurations to prevent path traversal
• Monitor for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the path traversal vulnerability in Dell OpenManage Enterprise. The vulnerability has a CVSS score of 6.1 and a medium severity. The CVE record was published on 2026-11-02T13:17:39.703Z and has not been modified since then. Dell OpenManage Enterprise versions prior to 4.8.0 are affected by this vulnerability. A high-privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to filesystem access for the attacker.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.