Dell OpenManage Enterprise CVE-2026-70424

Exploitation requires a valid low-privileged user account on Dell OpenManage Enterprise - the CVSS vector PR:L confirms at least some level of authenticated access is necessary. The attacker must have network access to the OpenManage Enterprise web interface. No user interaction by a second party is required (UI:N). No non-default configuration is specified as a prerequisite; the vulnerability appears to affect the standard product. Limiting factors: the authenticated prerequisite means unauthenticated external attackers cannot directly exploit this; impact is read-only (C:H/I:N/A:N), so the attacker cannot modify data or cause service disruption through this vector alone.

The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N accurately reflects the risk profile: network-reachable, low complexity, but requiring at minimum a low-privileged account, with impact confined entirely to confidentiality. The absence of integrity or availability impact and the PR:L requirement meaningfully constrain the attack surface compared to an unauthenticated or fully destructive flaw. No EPSS data was supplied, so exploitation probability cannot be quantified, but the vulnerability is absent from CISA KEV and no POC has been identified, suggesting limited observed exploitation to date. In practice, even a mid-sized municipal IT team in rybnik that relies on OpenManage Enterprise to manage server infrastructure should treat this as a patching priority rather than an emergency, given the authenticated prerequisite - but environments where OpenManage credentials are broadly distributed or where the platform is exposed beyond the management network face elevated risk from insider or compromised-account scenarios.

An attacker with a valid low-privileged account on Dell OpenManage Enterprise crafts an HTTP request to a file-serving endpoint, embedding path traversal sequences (e.g., '../../etc/passwd' or equivalent Windows paths) in a filename or path parameter. The server fails to canonicalize or restrict the resolved path, returning the contents of files outside the intended directory. No public exploit code has been identified at time of analysis, but the technique is well-understood and straightforward to implement given any authenticated session.