CVE-2026-111501: Medium severity vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. Exploitation requires adjacent network access, so systems reachable from the attacker’s local network segment are the relevant exposure boundary.
Does an attacker need an account or user interaction?
No. The issue is described as exploitable by an unauthenticated attacker and does not require user interaction.
What is the impact of successful exploitation?
Successful exploitation could enable phishing attacks. The provided severity vector indicates low confidentiality and integrity impact, with no availability impact.
What should be prioritized for remediation?
Update affected Dell OpenManage Enterprise deployments to version 4.8.0 or later. If an immediate update is not possible, limit adjacent-network access to the management interface to trusted systems.