{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adellopenmanage_ansible_modules/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.6,"id":"CVE-2026-91877"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (2.0.2-10.0.3)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, specifically versions 2.0.2 through 10.0.3, are affected by an Improper Neutralization of Special Elements in Data Query Logic vulnerability (CVE-2026-91877). The vulnerability exists within the OData filter processing component. A remote attacker with low privileges can exploit this flaw to bypass authorization, gain unauthorized access to sensitive data, or trigger a denial-of-service condition. The vulnerability has a CVSS v3.1 base score of 7.6.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthorized users to perform unauthorized data access, bypass authorization controls, and potentially disrupt service availability. The impact is primarily on the integrity and confidentiality of the systems managed by the affected Dell modules.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of Dell OpenManage Ansible Modules in the environment that fall within the vulnerable range (2.0.2 to 10.0.3).\u003c/li\u003e\n\u003cli\u003ePrioritize applying security updates provided by Dell to patch CVE-2026-91877 across all infrastructure-as-code and orchestration pipelines.\u003c/li\u003e\n\u003cli\u003eRestrict access to systems utilizing these modules to only trusted, authorized users to mitigate the risk from low-privileged exploitation until patching is complete.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T22:09:37Z","date_published":"2026-11-11T22:09:37Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cve-2026-91877/","summary":"Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 contain an improper neutralization vulnerability in OData filter processing, allowing low-privileged attackers to bypass authorization, access unauthorized data, or cause a denial of service.","title":"Dell OpenManage Ansible Modules: Improper Neutralization of Data Query Logic (CVE-2026-91877)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cve-2026-91877/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.6,"id":"CVE-2026-91878"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (6.0.0 through 10.0.3)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","xml-injection","ansible"],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, specifically versions 6.0.0 through 10.0.3, contain an improper neutralization of special elements vulnerability within the XML data conversion component (CVE-2026-91878). This vulnerability allows a low-privileged attacker with remote access to perform XML injection attacks. Successful exploitation can lead to the injection of malicious content into XML structures and cause XML parsing errors, potentially impacting the integrity of downstream processes managed by these modules. No patch or fixed version is currently specified in the source material.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation of this vulnerability may result in unauthorized data manipulation within XML-based configurations or data streams handled by the affected Ansible modules, leading to potential service disruption or manipulation of managed Dell infrastructure settings.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit environments using Dell OpenManage Ansible Modules versions 6.0.0 through 10.0.3 to identify exposed endpoints or automated workflows.\u003c/li\u003e\n\u003cli\u003eMonitor logs for unusual XML input patterns or parsing error events originating from automated management tasks performed by these modules.\u003c/li\u003e\n\u003cli\u003eMonitor vendor advisory channels for the release of an updated version of the affected Ansible modules that addresses this vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T20:11:36Z","date_published":"2026-11-11T20:11:36Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-xml-injection-cve-2026-91878/","summary":"Dell OpenManage Ansible Modules versions 6.0.0 through 10.0.3 are vulnerable to XML injection in the XML data conversion component, allowing low-privileged remote attackers to inject malicious content or induce parsing errors.","title":"Dell OpenManage Ansible Modules: XML injection vulnerability (CVE-2026-91878)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-xml-injection-cve-2026-91878/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2026-91875"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (9.2.0-10.0.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation could lead to information exposure and unauthorized access to the environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eRefer to official Dell security advisories regarding CVE-2026-91875 for remediation steps.\u003c/p\u003e\n","date_modified":"2026-11-11T20:11:17Z","date_published":"2026-11-11T20:11:17Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91875/","summary":"Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component which may allow an unauthenticated remote attacker to cause information exposure and unauthorized access.","title":"Dell OpenManage Ansible Modules: Improper Certificate Validation","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91875/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2026-91874"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (5.0.0-10.0.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation of this vulnerability may result in information exposure and unauthorized access to systems using the affected modules.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers are advised to review vendor guidance regarding CVE-2026-91874 and monitor for updates to the Dell OpenManage Ansible Modules.\u003c/p\u003e\n","date_modified":"2026-11-11T20:11:06Z","date_published":"2026-11-11T20:11:06Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91874/","summary":"Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 contain an improper certificate validation vulnerability in the iDRACConnection component that may lead to information exposure and unauthorized access.","title":"Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91874)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91874/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2026-91873"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (2.1.2-10.0.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contain an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. The CVSS base score is 8.7.\u003c/p\u003e\n","date_modified":"2026-11-11T20:10:55Z","date_published":"2026-11-11T20:10:55Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cert-validation-cve-2026-91873/","summary":"Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 are vulnerable to improper certificate validation in the iDRACRedfishAPI component, potentially leading to information exposure and unauthorized access.","title":"Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91873)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cert-validation-cve-2026-91873/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}