Improper Access Control in Dell Server Hardware Manager
CVE-2026-46461

7.8HIGH

Key Information:

Vendor

Dell
Status
Server Hardware Manager
Vendor
CVE Published:
19 June 2026

What is CVE-2026-46461?

Dell Server Hardware Manager has a vulnerability due to improper access control which may allow a low-privileged attacker with local access to exploit the system. This could potentially result in the elevation of privileges, granting the attacker unauthorized access to sensitive operations and configurations. Users are advised to update to version 3.2.2 or higher to mitigate this risk.

Affected Version(s)

Server Hardware Manager 0 < 3.2.2 or later

References

https://www.dell.com/support/kbdoc/en-us/000478484/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank falconCorrup for reporting this issue.
.