{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/openmanage-ansible-modules-2.0.2-10.0.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:openmanage_ansible_modules:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.6,"id":"CVE-2026-91877"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenManage Ansible Modules (2.0.2-10.0.3)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell OpenManage Ansible Modules, specifically versions 2.0.2 through 10.0.3, are affected by an Improper Neutralization of Special Elements in Data Query Logic vulnerability (CVE-2026-91877). The vulnerability exists within the OData filter processing component. A remote attacker with low privileges can exploit this flaw to bypass authorization, gain unauthorized access to sensitive data, or trigger a denial-of-service condition. The vulnerability has a CVSS v3.1 base score of 7.6.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthorized users to perform unauthorized data access, bypass authorization controls, and potentially disrupt service availability. The impact is primarily on the integrity and confidentiality of the systems managed by the affected Dell modules.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of Dell OpenManage Ansible Modules in the environment that fall within the vulnerable range (2.0.2 to 10.0.3).\u003c/li\u003e\n\u003cli\u003ePrioritize applying security updates provided by Dell to patch CVE-2026-91877 across all infrastructure-as-code and orchestration pipelines.\u003c/li\u003e\n\u003cli\u003eRestrict access to systems utilizing these modules to only trusted, authorized users to mitigate the risk from low-privileged exploitation until patching is complete.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T22:09:37Z","date_published":"2026-11-11T22:09:37Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cve-2026-91877/","summary":"Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 contain an improper neutralization vulnerability in OData filter processing, allowing low-privileged attackers to bypass authorization, access unauthorized data, or cause a denial of service.","title":"Dell OpenManage Ansible Modules: Improper Neutralization of Data Query Logic (CVE-2026-91877)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cve-2026-91877/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenManage Ansible Modules (2.0.2-10.0.3)","version":"https://jsonfeed.org/version/1.1"}