CVE-2026-91900
Last modified
CVE-2026-91900 is a medium-severity vulnerability rated 5.8/10 on the CVSS scale. Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Dell | Alienware Command Center (AWCC) | < 6.14.54.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-91900?
How severe is CVE-2026-91900?
How do I fix CVE-2026-91900?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-91895Dell Alienware Command Center (AWCC), versions prior to 6.14…7.1
- CVE-2026-91896Dell Alienware Command Center (AWCC), versions prior to 6.14…3.9
- CVE-2026-91897Dell Alienware Command Center (AWCC), versions prior to 6.14…6.4
- CVE-2026-91898Dell Alienware Command Center (AWCC), versions prior to 6.14…8.1
- CVE-2026-91899Dell Alienware Command Center (AWCC), versions prior to 6.14…6.4
- CVE-2026-9190An HTTP request smuggling vulnerability in the HTTP App Serv…9.1
- CVE-2026-91901Dell Alienware Command Center (AWCC), versions prior to 6.14…3.5
- CVE-2026-91903Dell OpenManage Enterprise, versions prior to 4.8.0, contain…6.1
- CVE-2026-91904Dell OpenManage Enterprise, versions prior to 4.8.0, contain…5.5
- CVE-2026-91905Dell OpenManage Enterprise, versions prior to 4.8.0, contain…6.7
- CVE-2026-91906Dell OpenManage Enterprise, versions prior to 4.8.0, contain…5.5
- CVE-2026-91907Dell OpenManage Enterprise, versions prior to 4.8.0, contain…6.1
Are you affected by CVE-2026-91900?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST