{"id":"CVE-2026-111501","kind":"vulnerability","aliases":["CVE-2026-111501"],"related":[],"title":"Dell OpenManage Enterprise: missing login attempt limits enable phishing attacks","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.","summary":"Dell OpenManage Enterprise before 4.8.0 does not restrict excessive authentication attempts. An unauthenticated attacker on the adjacent network could use this to launch phishing attacks.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","on-prem","openmanage","self-hosted"],"not_affected_if":["version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console and compare it with `4.8.0`","fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later","status":"open","published_at":"2026-10-30T13:18:28+00:00","first_seen_at":"2026-10-30T13:30:26+00:00","triaged_at":"2026-10-30T13:32:11+00:00","updated_at":"2026-10-30T13:32:11+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-30T13:32:11Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later","reach":"network","title":"Dell OpenManage Enterprise: missing login attempt limits enable phishing attacks","impact":"low","summary":"Dell OpenManage Enterprise before 4.8.0 does not restrict excessive authentication attempts. An unauthenticated attacker on the adjacent network could use this to launch phishing attacks.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage","self-hosted","on-prem"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"attacker launches phishing attacks from the management console","analyst_note":"","how_to_check":"- Check the installed OpenManage Enterprise version in the web console and compare it with `4.8.0`\n- unknown","plain_action":"","needs_analyst":false,"not_affected_if":["version-4.8.0-or-later"],"who_is_affected":"Teams that run Dell OpenManage Enterprise for managing server hardware on their internal network are affected when running versions before 4.8.0. The sources do not say which deployment settings make it reachable, so exposure beyond adjacent network access is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00065,"input_tokens":4134,"output_tokens":473,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111501':13A,16A '-2026':12A,15A '4.8.0':30B,57C 'access':73C 'adjac':42B,71C 'attack':10A,39B,50B,69C,84C 'attempt':6A,36B,65C 'authent':35B,64C 'contain':58C 'could':44B,74C 'cve':11A,14A 'dell':1A,17B,26B,51C 'enabl':8A 'enterpris':3A,28B,53C 'excess':34B,63C 'exploit':76C 'host':25B 'improp':60C 'infrastructur':18B 'launch':48B,81C 'lead':79C 'limit':7A 'login':5A 'miss':4A 'network':43B,72C 'on-prem':19B 'openmanag':2A,22B,27B,52C 'phish':9A,49B,83C 'potenti':75C 'prem':21B 'prior':55C 'restrict':33B,61C 'self':24B 'self-host':23B 'unauthent':38B,68C 'use':45B 'version':54C 'vulner':66C,78C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell OpenManage Enterprise for managing server hardware on their internal network are affected when running versions before 4.8.0. The sources do not say which deployment settings make it reachable, so exposure beyond adjacent network access is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T13:18:28+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111501","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111501","severity":null,"published_at":"2026-10-30T13:18:28+00:00","modified_at":"2026-10-30T13:18:28+00:00","first_seen_at":"2026-10-30T13:30:26+00:00","fetched_at":"2026-10-30T13:30:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}