CVE-2026-111501

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 56/100
Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: None

Description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.

Affected Software (2)

VendorProductVersion
Dell OpenManage Enterprise 0 < 4.8.0 or later
Dell OpenManage Enterprise 0 < 4.8.0 or later

Bug Bounty Relevance

56 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.4 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →