Dell OpenManage Enterprise EUVD-2026-113773

Requires local access to the Dell OpenManage Enterprise host plus a pre-existing low-privileged authenticated account on that system (CVSS PR:L, AV:L); it cannot be triggered remotely or by an unauthenticated actor. No user interaction is needed (UI:N). The description names no special feature, protocol, or non-default configuration as a prerequisite, and the specific mechanism that permits the privilege escalation is not described in the available sources. The principal limiting factor is the need to first hold a foothold with a low-privilege account on the OME appliance; all affected deployments run versions prior to 4.8.0.

This is a genuine but not emergency-level priority. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8 HIGH) describes a local privilege-escalation flaw: the attacker must already have local access and a low-privileged authenticated account (PR:L), but once present, exploitation is low-complexity (AC:L), needs no user interaction (UI:N), and yields full confidentiality, integrity, and availability impact on the host. The vuln.today decision label is 'this_week', consistent with a serious-but-locally-gated flaw rather than an internet-facing emergency. No EPSS score, no CISA KEV listing, and no PoC/exploit reference are present in the input, so there is no public exploitation signal to elevate urgency beyond the local-access precondition. There is no conflict between the CVSS vector and the description - both agree on local access and privilege elevation. The practical risk is therefore highest in environments where many users hold low-privilege shell or console access to the OpenManage Enterprise host; in tightly controlled management-network deployments the exposure is correspondingly smaller.

An attacker who already holds a low-privileged local account on the Dell OpenManage Enterprise host abuses the improper privilege management flaw (CWE-269) to elevate to higher privileges on that system. Because OME is an infrastructure management console, elevated access there can translate into broad control over managed Dell servers. The specific trigger mechanism is not described in the available sources, and no public exploit was identified at time of analysis.