Description
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Published: 2026-10-30
Score: 4.7 Medium
EPSS: n/a
KEV: No
Impact: Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

The vulnerability, identified as an Improper Resource Locking flaw (CWE‑413), exists in Dell OpenManage Enterprise versions older than 4.8.0. When exploited by an attacker who already has local high‑privilege access, the flaw allows bypassing built‑in protection mechanisms, potentially enabling the attacker to gain broader control over the system. This vulnerability can lead to unauthorized privilege escalation and compromise system integrity.

Affected Systems

Affected products are Dell OpenManage Enterprise, all releases prior to version 4.8.0. No specific sub‑version numbers are listed, but any installation that predates 4.8.0 remains susceptible.

Risk and Exploitability

The CVSS score is 4.7, indicating moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting the likelihood of widespread exploitation is currently low. The attack requires local access with high privileges, limiting the exposure to environments where privileged accounts exist. Nonetheless, mitigating the flaw promptly reduces the risk of privilege escalation.

Generated by OpenCVE AI on October 30, 2026 at 15:23 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and install the Dell OpenManage Enterprise security update (4.8.0 or later).
  • Remove or restrict local accounts that have high privileges to prevent exploitation of the resource locking issue.
  • Configure the system to enforce least privilege and enable detailed logging to detect attempts to bypass protection mechanisms.

Generated by OpenCVE AI on October 30, 2026 at 15:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 30 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
Title Improper Resource Locking in Dell OpenManage Enterprise Enables Privileged Local Bypass of Protection Mechanisms

Fri, 30 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 30 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Description OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Weaknesses CWE-413
References
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-30T14:09:53.946Z

Reserved: 2026-10-16T10:04:03.174Z

Link: CVE-2026-111498

cve-icon Vulnrichment

Updated: 2026-10-30T14:09:44.963Z

cve-icon NVD

Status : Received

Published: 2026-10-30T14:16:37.463

Modified: 2026-10-30T14:16:37.463

Link: CVE-2026-111498

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T15:30:16Z

Weaknesses
  • CWE-413

    Improper Resource Locking