CVE-2026-91882

8.6 Élevée

Publiée le 14/10/2026 à 18:17 · Modifiée le 15/10/2026 à 18:18 · En attente d'analyse NVD · Source : security_alert@emc.com

Description

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Traduire en français

Produits concernés

Dell Terraform Provider for OME

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.6 Élevée	security_alert@emc.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`

Faiblesses (CWE)

CWE-209

Références

https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories