MinorCritical vulnerability

CVE-2026-91878 (CVSS 7.6)

NVD · officialPublished Nov 11, 2026Risk 23/100

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors

Technical details

CVSS

7.6

AV:NetworkAC:LowPR:LowUI:NoneC:LowI:HighA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source