MajorCritical vulnerability

CVE-2026-91882 (CVSS 8.6)

NVD · officialPublished Oct 14, 2026Risk 37/100

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Technical details

CVSS

8.6

AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:LowA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source