Dell OpenManage Enterprise <4.8.0 Unauthenticated SSRF (Missing Auth)
CVE-2026-111500 Published on October 30, 2026
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request forgery.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
LOW
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-111500
Want to know whenever a new CVE is published for Dell Openmanage Enterprise? stack.watch will email you.
Affected Versions
Dell OpenManage Enterprise:- Before 4.8.0 or later is affected.