Incorrect Permission Assignment Vulnerability in Dell OpenManage Enterprise
CVE-2026-111499

5.5MEDIUM

Key Information:

Vendor

Dell
Status
Openmanage Enterprise
Vendor
CVE Published:
30 October 2026

What is CVE-2026-111499?

Dell OpenManage Enterprise versions prior to 4.8.0 are susceptible to a vulnerability that stems from incorrect permission assignments. This weakness allows an attacker with low privileges and local access to exploit the system, potentially bypassing critical resource protection mechanisms. Organizations using affected versions should prioritize applying the necessary security updates to mitigate risks.

Affected Version(s)

OpenManage Enterprise 0 < 4.8.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000523220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.