medium · CVSS v3 5.5

CVE-2026-91906

Dell OpenManage Enterprise versions prior to 4.8.0 have an incorrect permission assignment that can allow a local low‑privileged user to byp

Overview

Dell OpenManage Enterprise versions prior to 4.8.0 have an incorrect permission assignment that can allow a local low‑privileged user to bypass protection mechanisms. This flaw could let attackers gain elevated access to critical management functions. The vulnerability is rated medium severity.

Description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Impact

The vulnerability can compromise confidentiality, integrity, and availability of the management platform. A local attacker with limited privileges can elevate privileges to perform unauthorized actions. This threatens the security posture of organizations using Dell OpenManage Enterprise for infrastructure management.

Remediation

Apply the latest Dell OpenManage Enterprise patch (4.8.0 or later). If unable to patch immediately, restrict local user accounts to the minimum required permissions and enforce least‑privilege policies. Monitor for anomalous privilege escalation events.

Risk context

Medium severity with a CVSS v3 score of 5.5. No EPSS data available. The risk is moderate; defenders should prioritize patching but can also apply mitigations while awaiting updates.

Affected products

  • Dell OpenManage Enterprise

Scores

Severity
medium
CVSS v2
4.6
CVSS v3
5.5
CVSS v4
—
EPSS
—

Dell OpenManage Permission Privilege Escalation Local Management Medium

← All CVEs

Related CVEs

medium

CVE-2026-105605

An IDOR flaw in the Joomla DJ-Classifieds extension allows any logged‑in user to retrieve the full details of any advertisement by supplying its numeric ID. The issue exists in all versions prior to 3.11.3 and exposes sensitive advertiser information such as phone numbers, addresses, and prices. It can be exploited without any special privileges or external access.

View analysis

medium

CVE-2026-105770

Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC token does not satisfy that policy. TrustPolicy.CheckToken included the policy's issuer, subject and audience values or patterns and claim_pattern names and regular expressions in its PermissionDenied errors, which Exchange returned verbatim. Exchange also selected the GitHub App installation before checking the token, so errors from resolving the policy's app or app_pattern pin were returned to callers the policy does not trust. An attacker who holds any validly signed OIDC token, such as a GitHub Actions token from a repository they own, and who knows or guesses a target owner/repo and identity name can read that policy's matching rules, even when the policy is stored in a private repository. These rules often name internal repositories, branches, environments or cloud account identifiers. The issue does not allow minting tokens or bypassing a trust policy. This issue is fixed in 0.11.2.

View analysis

medium

CVE-2026-111464

The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.3. The plugin caches the response of Core’s wp-activate.php without honoring its no-store/no-cache headers, the wp-activate-* cookie, or the WP_INSTALLING state, writing the credential-bearing activation response to a publicly accessible cache file. This makes it possible for unauthenticated attackers to retrieve the plaintext username and twelve-character password of the most recently activated Multisite registrant from that cached wp-activate.php response. Exploitation requires a Multisite subdirectory installation with public user and site registration enabled, and the credentials are only exposed after a genuine registrant follows their activation link.

View analysis

medium

CVE-2026-120237

A flaw in ag-ui-protocol ag-ui up to 0.0.58 allows manipulation of the isInterruptExpired function, leading to excessive resource consumption. The vulnerability can be exploited remotely and an exploit is publicly available. Patching to a fixed version is required to mitigate the risk.

View analysis