CVE-2026-54794 Dell CVE debrief

Who should care

IT administrators and security teams responsible for Dell OpenManage Enterprise installations, as well as organizations using affected versions of the software, should prioritize patching to prevent potential information exposure. This includes reviewing current deployments, assessing potential impact, and coordinating with relevant stakeholders to ensure timely mitigation.

Technical summary

CVE-2026-54794 is a Server-Side Request Forgery (SSRF) vulnerability in Dell OpenManage Enterprise versions prior to 4.7.0. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. The vulnerability has a CVSS score of 7.2 and is classified as HIGH severity. Organizations using Dell OpenManage Enterprise versions prior to 4.7.0 should prioritize patching to prevent potential information exposure.

Defensive priority

Organizations using Dell OpenManage Enterprise versions prior to 4.7.0 should prioritize patching to prevent potential information exposure.

Recommended defensive actions

• Apply patches or updates to Dell OpenManage Enterprise to version 4.7.0 or later
• Restrict access to Dell OpenManage Enterprise to trusted users and networks
• Monitor Dell OpenManage Enterprise for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE-2026-54794 record indicates a Server-Side Request Forgery (SSRF) vulnerability in Dell OpenManage Enterprise versions prior to 4.7.0. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. The NVD entry is currently Analyzed.

Official resources