High severity7.6NVD Advisory· Published Nov 11, 2026
CVE-2026-91878
CVE-2026-91878
Description
Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=6.0.0,<10.0.4+ 1 more
- (no CPE)range: >=6.0.0,<10.0.4
- (no CPE)range: 6.0.0 - 10.0.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.