EUVD-2026-115145
GHSA-p5hx-2vmx-6pfp
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privileged local access to OME host
-
ExploitLocate incorrectly-permissioned critical resource
-
ExecutionBypass intended protection mechanism
-
ImpactRead sensitive confidential data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V13 - Configuration Permission assignment review
|
| Exploitation Conditions | Exploitation requires the attacker to already have local access to the system running Dell OpenManage Enterprise (versions prior to 4.8.0) with at least low-privilege credentials (CVSS PR:L, AV:L); it cannot be triggered remotely or by an unauthenticated user. No user interaction is needed (UI:N). The impact is limited to confidentiality (C:H; I:N/A:N) via bypass of an intended protection mechanism arising from incorrect permission assignment on a critical resource. The available sources do not name the exact resource, feature, or configuration involved, so no non-default configuration prerequisite is confirmed; the primary limiting factors are the local-access and authentication requirements. |
| Impact | This is a moderate-severity local privilege/permission issue, not an urgent remote threat. The CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) is driven entirely by a high confidentiality impact reachable only by an already-authenticated low-privileged user with LOCAL access to the host running Dell OpenManage Enterprise - there is no network vector and no integrity or availability impact. The vuln.today decision label is 'this_month' (not act_now/emergency), consistent with a real-but-non-critical issue. Exploitation signals are weak: there is no CISA KEV listing, no public PoC or exploit reference in the input, and no EPSS probability was supplied, so exploitation likelihood cannot be quantified. One note on data consistency: the CWE is CWE-732 (Incorrect Permission Assignment) leading to a 'Protection mechanism bypass' per Dell, yet the input Tags label this 'Authentication Bypass' - these are not the same, and the local, PR:L nature of the flaw does not describe an authentication bypass; treat the tag with caution. Net: prioritize for routine patching within the vendor/triage window, not as an emergency. |
| Exploit ScenarioDerived | A user who already has low-privileged local access to the server hosting Dell OpenManage Enterprise abuses incorrectly assigned permissions on a critical resource to read sensitive data they should not be able to access, bypassing an intended protection mechanism. No public exploit identified at time of analysis, and the specific resource and exact trigger are not described in the available sources. The CVSS vector (AV:L/AC:L/PR:L) indicates low attack complexity but requires pre-existing local authenticated access. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 02, 2026
Incorrect permission assignment on a critical resource in Dell OpenManage Enterprise versions prior to 4.8.0 allows an attacker who already holds low-privilege local access to bypass an intended protection mechanism and read information they should not be able to reach. The flaw is confidentiality-only (no integrity or availability impact) and is scored 5.5; it cannot be triggered remotely or without credentials, since the assessed vector requires local access (AV:L) and low privileges (PR:L). There is no CISA KEV listing and no public exploit code identified at time of analysis, and Dell addresses the issue with the 4.8.0 release described in advisory DSA-2026-467.
RemediationAI
Upgrade Dell OpenManage Enterprise to version 4.8.0 or later, the fixed release named in Dell advisory DSA-2026-467 (https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities); because this is an appliance-based product, plan the update as a maintenance-window activity and confirm the post-upgrade build string. The supplied advisory excerpt does not include product-specific workarounds, and since the misconfigured resource is not named in the available sources no targeted configuration workaround can be specified; until the update is applied, the only lever the assessed vector identifies is the local-access prerequisite, so restrict interactive and local logon to the appliance host to administrators who genuinely require it, review and reduce low-privilege local accounts, and alert on their use. Each of these reduces the population able to reach the flawed resource but does not correct the permission assignment itself, and tightening local access can interfere with legitimate read-only or delegated administration workflows, so coordinate with the teams using those accounts. Prioritisation fits a this-month cadence rather than emergency response, given the local and authenticated prerequisites, the confidentiality-only impact, and the absence of KEV or public exploit reporting.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-732, Incorrect Permission Assignment for Critical Resource: a resource that OpenManage Enterprise relies on to enforce a security boundary is shipped or configured with permissions broader than intended, so a process or user running at low privilege can access it directly and sidestep the check the product meant to apply. The assessed vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N confirms the attack path is local, requires low-privilege credentials, needs no user interaction, does not cross a scope boundary, and yields high confidentiality impact with no integrity or availability effect. The available sources do not name the specific resource, feature, file, service or configuration involved, and the trigger mechanics beyond the local-access and low-privilege prerequisites are not described in the available sources, so no non-default configuration dependency is confirmed. OpenManage Enterprise is Dell's browser-managed appliance for discovering and managing PowerEdge server fleets, which is why local access to the appliance host is itself a meaningful barrier and why the exposure is concentrated in environments where many users hold local accounts on the appliance or its underlying operating system.
Know when Openmanage Enterprise gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Local access with pre-existing low privileges (AV:L/PR:L), low complexity, no UI; impact is confidentiality-only (C:H, I:N, A:N) for a protection-mechanism bypass.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
1DescriptionCVE.org
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Threat Intelligence Overview
NVD
CVE.org
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Openmanage Enterprise
View allDell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. Rated critical seve
OS command injection in Dell OpenManage Enterprise prior to version 4.7.0 enables low-privileged remote attackers to exe
SQL injection in Dell OpenManage Enterprise (all versions prior to 4.7.0) enables a low-privileged remote attacker to ma
SQL injection in Dell OpenManage Enterprise prior to version 4.7.0 allows a low-privileged authenticated remote attacker
SQL injection in Dell OpenManage Enterprise prior to version 4.7.0 allows a remote attacker holding low-privilege creden
OS command injection in Dell OpenManage Enterprise affects all versions prior to 4.8.0: a remote attacker who already ho
OS command injection in Dell OpenManage Enterprise versions prior to 4.8.0 lets a remote, low-privileged authenticated a
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code In
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. Rated high severity
Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.
Command injection in Dell OpenManage Enterprise versions prior to 4.8.0 lets an authenticated low-privileged attacker wi
Improper input validation in Dell OpenManage Enterprise versions prior to 4.8.0 allows an attacker who holds a low-privi
Exploit-DB