Vulnerabilities

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a…

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Dell Technologies

Product

OpenManage Ansible Modules

CVSS v3.1

7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Weakness

CWE-91

Exposure class

Developer platform, Storage / NAS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-91878 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   CVE NVD 2h ago

   Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic…

   CVSS 7.6 CVE-2026-91877 Dell Technologies