Dell OpenManage Enterprise EUVD-2026-115147

Exploitation requires two concrete, compounding prerequisites both reflected in the CVSS vector: (1) the attacker must already hold high-privileged/administrative access to the Dell OpenManage Enterprise console (PR:H), and (2) the attacker must have adjacent-network access (AV:A), meaning a position on the same logical network segment - typically the server management or out-of-band network - rather than arbitrary remote internet access. No user interaction is required (UI:N) and attack complexity is low (AC:L) once those preconditions are met. These two requirements - pre-existing admin privilege and adjacent-network reach - are the principal factors limiting realistic exploitation, confining the threat largely to insiders or an actor who has already compromised the management network. The affected scope is OpenManage Enterprise versions prior to 4.8.0; the specific configuration or feature that exposes the path-traversal is not described in the available sources.

This is a moderate-severity, vendor-reported issue (Dell DSA-2026-467, CVSS 6.1) that signals as a manageable, scheduled-patch priority rather than an emergency. The CVSS vector itself substantially constrains real-world risk: AV:A limits the attacker to an adjacent network position (same logical L2/management segment, not arbitrary internet reach), and PR:H requires the attacker to already hold high/administrative privileges on the OpenManage Enterprise console. An actor meeting the PR:H precondition is already highly trusted, which materially lowers the marginal impact of this flaw. No EPSS score, CISA KEV listing, or public PoC/exploit reference is present in the supplied data, and exploitation status is therefore 'no public exploit identified at time of analysis.' The vuln.today decision label is 'this_month,' consistent with a real but non-urgent fix window. One internal inconsistency should be noted for verification: the description states the outcome is 'Filesystem access for attacker' (which typically implies a confidentiality/read impact), yet the Dell CVSS vector sets C:N while rating I:H/A:H - the mechanism by which path traversal yields integrity and availability impact rather than confidentiality is not explained in the available sources; verify the exact impact with Dell.

An attacker who has already obtained high-privileged (administrative) access to a Dell OpenManage Enterprise console, and who sits on an adjacent network segment such as the server management/out-of-band network, submits a request containing crafted path-traversal sequences to reach files outside the intended restricted directory. No public exploit code or PoC reference is identified in the available data, and the specific feature or endpoint that mishandles the pathname is not described in the sources.