---
id: "CVE-2026-111501"
kind: "vulnerability"
aliases: ["CVE-2026-111501"]
title: "Dell OpenManage Enterprise: missing login attempt limits enable phishing attacks"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dell", "infrastructure", "on-prem", "openmanage", "self-hosted"]
not_affected_if: ["version-4.8.0-or-later"]
published_at: "2026-10-30T13:18:28+00:00"
first_seen_at: "2026-10-30T13:30:26+00:00"
updated_at: "2026-10-30T13:32:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111501", "first_seen_at": "2026-10-30T13:30:26+00:00"}]
---

# Dell OpenManage Enterprise: missing login attempt limits enable phishing attacks

Dell OpenManage Enterprise before 4.8.0 does not restrict excessive authentication attempts. An unauthenticated attacker on the adjacent network could use this to launch phishing attacks.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed OpenManage Enterprise version in the web console and compare it with `4.8.0`

## Fix

- Dell OpenManage Enterprise: move to `4.8.0` or later

## Timeline

- 2026-10-30T13:30:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111501

## From the sources

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_