{"id":"CVE-2026-111501","aliases":[],"cve":{"records":[{"id":"CVE-2026-111501","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-16T10:04:03.175Z","published":"2026-10-30T12:20:20.402Z","modified":"2026-10-30T15:07:32.835Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-10-30T12:20:20.402Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T15:07:32.835Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-307","description":"CWE-307: Improper Restriction of Excessive Authentication Attempts","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T14:37:20.427497Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.","titleSource":"dell","descriptionSource":"dell","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.","score":5.4,"severity":"medium","published":"2026-10-30T12:20:20.402Z","modified":"2026-10-30T15:07:32.835Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"OpenManage Enterprise","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"4.8.0 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-111501"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9"],"sources":[{"name":"CVE","id":"CVE-2026-111501","modified":"2026-10-30T15:07:32.835Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-111501"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":5.4}],"sourceAffected":[],"observedAt":"2026-10-30T15:20:06.719Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:10:32.801Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T15:20:33.632Z","attemptedAt":"2026-10-30T15:20:33.632Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T15:20:34.051Z","attemptedAt":"2026-10-30T15:20:34.051Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T15:20:34.205Z","attemptedAt":"2026-10-30T15:20:34.205Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T15:20:33.714Z","attemptedAt":"2026-10-30T15:20:33.714Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-111501","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111501","modified":"2026-10-30T13:18:28.203","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","checkedAt":"2026-10-30T15:20:33.632Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113900","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113900","modified":"Oct 30, 2026, 12:20:20 PM","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","checkedAt":"2026-10-30T15:20:34.205Z"}],"aiSummary":{"text":"Dell OpenManage Enterprise versions prior to 4.8.0 have an Improper Restriction of Excessive Authentication Attempts vulnerability, potentially allowing an unauthenticated attacker with adjacent network access to launch phishing attacks. The vulnerability affects versions less than 4.8.0.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T12:31:01.163Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-111501"}]}}