CVE-2026-91912
Received Received - Intake

Hard-coded Cryptographic Key in Dell OpenManage Enterprise

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Dell

Description
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-91912
EUVD
EUVD-2026-113949

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Dell OpenManage Enterprise 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-321 The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell OpenManage Enterprise versions before 4.8.0 have a vulnerability where hard-coded cryptographic keys are used. This allows a low-privileged attacker with local access to potentially exploit it and disclose sensitive information.

Impact Analysis

An attacker could gain access to confidential data due to the hard-coded keys being used for encryption. This could lead to unauthorized information disclosure if exploited.

Mitigation Strategies

Update Dell OpenManage Enterprise to version 4.8.0 or later to address the hard-coded cryptographic key vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91912. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart