CVE-2026-91883: vulnerability facts

CVE-2026-91883

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

CVSS 4.3 · Medium · EPSS 0.3% · Fix available

Published: 2026-10-14T15:20:26.092Z
Updated: 2026-10-15T19:09:54.318Z

Affected products and versions

terraform provider for ome
Versions
- ≥ 0, < 1.2.4 or later: Affected (semver)
Update to 1.2.4 or later

Original sources

https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9
https://nvd.nist.gov/vuln/detail/CVE-2026-91883

Check your server →

CVE-2026-91883

Affected products and versions

terraform provider for ome

Original sources