CVE-2026-91883

MediumCVSS 4.3

Published: 14/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Risk Assessment

A low privileged remote attacker could access sensitive information written to logs, potentially leading to data leakage.

Recommendation

Upgrade Dell Terraform Provider for OME to a version later than 1.2.3 and secure access to log files.

Other vulnerabilities in Dell Terraform Provider for OME

CVE-2026-91882High
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS