Dell OpenManage Enterprise CVE-2026-111505

Requires an authenticated, low-privileged account (CVSS PR:L) with remote network access to the Dell OpenManage Enterprise management interface on an instance running a version prior to 4.8.0; no user interaction is needed (UI:N). The specific product feature, parameter, or configuration that carries the injectable input is not described in the available sources. Limiting factors that reduce real-world exposure: exploitation is not unauthenticated (an attacker must first obtain valid low-privilege credentials or an active session), the appliance must be network-reachable to the attacker, and instances already updated to 4.8.0 or later are not affected; vendor patching to 4.8.0 is the stated remediation.

This is a credible, actionable priority rather than an inflated high-CVSS artifact. The CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) describes low-complexity remote exploitation requiring only low privileges and no user interaction, with full compromise of confidentiality, integrity, and availability - consistent with OS command injection (CWE-78) on a server-management appliance. The vuln.today decision label is 'this_week', indicating a prompt but not emergency timeline. Key exploitation-pressure signals are MISSING from the input: no EPSS probability is provided, there is no CISA KEV listing, and no public PoC or exploit reference is supplied, so there is no public exploit identified at time of analysis. The PR:L metric means exploitation is authenticated (low-privileged), which meaningfully tempers raw risk versus a fully unauthenticated flaw, but OpenManage Enterprise deployments often hold many low-privilege operator accounts, so the privilege bar is low in practice. Net: a high-impact, low-complexity authenticated RCE with a vendor patch available and a 'this_week' urgency label - prioritize patching, but current evidence shows no confirmed active exploitation or published exploit code.

An attacker holding a low-privileged account on a network-reachable Dell OpenManage Enterprise console submits input to an affected function that is passed unsafely into an OS command, injecting attacker-controlled command elements. Because the CVSS vector is AV:N/AC:L/PR:L/UI:N, this requires only remote network access, authenticated low privileges, and no user interaction, and yields command execution on the appliance with high confidentiality, integrity, and availability impact. No public exploit identified at time of analysis; the specific injectable feature or parameter is not described in the available sources.