PT-2026-145439
CVE-2026-91878
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 3.1
7.6
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors
Found an issue in the description? Have something to add? Feel free to write us 👾