Dell OpenManage Enterprise EUVD-2026-115137

Exploitation requires an attacker on an adjacent network segment (AV:A - the vulnerability is not reachable across routed/internet paths, typically limiting it to the same management VLAN or L2 broadcast domain) who additionally holds high privileges on the application (PR:H - an already-authenticated administrative or equivalently privileged OpenManage Enterprise account). No user interaction is needed (UI:N). The affected scope is any Dell OpenManage Enterprise instance on a version prior to 4.8.0. These combined prerequisites - privileged authentication plus adjacent placement - are the principal limiting factors and markedly reduce realistic exploitability compared with the raw 6.1 score; there are no special feature or non-default-configuration conditions stated in the available sources, and the precise triggering request is not described in DSA-2026-467 as provided.

This is a moderate-severity issue (vendor CVSS 6.1) whose real-world urgency is tempered by its access requirements. The CVSS vector CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H establishes that exploitation requires adjacent network access (AV:A, not routable from the internet) and high privileges (PR:H, an already-authenticated high-privilege account), which substantially narrows the realistic attacker population to insiders or an adversary who has already compromised a privileged session on the management plane. No EPSS score is provided in the input, the CVE is not listed in CISA KEV, and no proof-of-concept or exploit reference is supplied, so there is no public exploit identified at time of analysis. The vuln.today decision label is 'this_month' - meaningful priority but below act_now/emergency - which is consistent with a high-privilege, adjacent-only flaw rather than a wormable remote bug. One notable internal inconsistency: the CVSS impact set is C:N/I:H/A:H (no confidentiality impact, high integrity and availability impact), yet the description states the outcome is 'Filesystem access for attacker,' which usually implies a read/confidentiality effect; this suggests the traversal is write/overwrite-oriented (enabling file modification or disruption) rather than file disclosure - verify the exact primitive with Dell advisory DSA-2026-467. Overall this is a legitimate patch-management item for Dell server-management environments, not a drop-everything emergency.

An attacker who already holds a high-privilege account on a Dell OpenManage Enterprise instance (or has pivoted onto the adjacent management network segment) submits a crafted request containing directory-traversal sequences to a vulnerable handler, escaping the intended restricted directory to reach arbitrary filesystem paths. Per the CVSS impact (I:H/A:H), this most plausibly allows modifying or overwriting files on the appliance, affecting integrity and availability of the management platform. No public exploit identified at time of analysis, and the adjacent-network plus high-privilege requirements keep this out of reach of opportunistic remote attackers.