Dell OpenManage Enterprise Incorrect Permission Assignment Vulnerability Advisory (CVE-2026-111499)

• Primary Mitigation: Upgrade Dell OpenManage Enterprise to version 4.8.0 or higher via the official Dell Support site. \n2. Access Control: Enforce the principle of least privilege by restricting SSH and local console access to authorized personnel only. \n3. Auditing: Review local user accounts and audit file system access logs for any unauthorized attempts to read system configuration files. \n

bash\n# Check current version via OME CLI or Web UI\n# Navigate to: Application Settings > Console and Plugins\n

The vulnerability (CVE-2026-111499) is classified under CWE-732: Incorrect Permission Assignment for Critical Resource. In Dell OpenManage Enterprise (OME), certain system-level resources or configuration files are assigned overly permissive access controls. This flaw allows an attacker who has already gained low-privileged local access to the appliance to interact with or read sensitive data that should be restricted to administrative users. By exploiting these incorrect permissions, the attacker can bypass built-in security boundaries, potentially leading to a full compromise of the management console's confidentiality and integrity. The EPSS score of 0.42 indicates a non-negligible level of threat activity or potential for exploitation in the wild.