Dell OpenManage Enterprise EUVD-2026-115143

Exploitation requires local access to the host running Dell OpenManage Enterprise plus existing low-privileged credentials on that system (CVSS PR:L), targeting versions prior to 4.8.0. The incorrect permission assignment (CWE-732) lets such a user bypass a protection mechanism to access a critical resource; the exact resource and the specific protection bypassed are not described in the available sources. Limiting factors: no remote network vector (AV:L), the attacker must already be authenticated on the host at low privilege, and impact is confined to confidentiality (I:N/A:N) with no scope change (S:U). Upgrading to version 4.8.0 per Dell DSA-2026-467 remediates it.

This is a moderate-severity, local-access issue that should be patched on a normal cycle rather than treated as an emergency. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 5.5) describes a flaw requiring local access and existing low-level privileges (PR:L), with no user interaction and impact limited to confidentiality (C:H; I:N/A:N). The vuln.today decision label is 'this_month', consistent with a real but non-urgent priority. There is no EPSS score, no CISA KEV listing, and no public exploit or PoC reference in the supplied data, so there is no evidence of active or imminent exploitation. The main tension in the data is the 'Authentication Bypass' tag versus the actual weakness: the description and CWE-732 (Incorrect Permission Assignment for Critical Resource) describe a protection-mechanism bypass by an already-authenticated low-privileged local user, not a true pre-authentication bypass - the tag overstates the access gained. Net: a legitimate confidentiality risk for insiders/foothold-holders on the management host, but not a high-real-risk internet-facing threat.

A user who already has low-privileged local access to the host running Dell OpenManage Enterprise abuses incorrect permissions on a critical resource to bypass a protection mechanism and read sensitive data they should not be able to access. No user interaction or additional privilege is required beyond the initial low-privileged local foothold. No public exploit code or PoC was identified in the available sources.