What is the CVSS score of CVE-2026-56794?

CVE-2026-56794 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-56794?

Yes, a patch is available for CVE-2026-56794. Update the affected software to the latest version immediately.

Dell Openmanage Server Administrator Managed Node For Rhel 8 10 CVE-2026-56794

EUVD-2026-54475 MEDIUM

Relative Path Traversal (CWE-23)

2026-08-07 dell

GHSA-9h66-j2w4-xvjx

Path Traversal Dell Dell Openmanage Server Administrator Managed Node For Rhel 8 10 Dell Openmanage Server Administrator Managed Node For Rhel 9 4 Dell Openmanage Server Administrator Managed Node For Sles 15 Dell Openmanage Server Administrator Managed Node Patch For Windows

6.5

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (dell) · only source for this CVE.

CVSS VectorVendor: dell

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Aug 07, 2026 - 13:01 EUVD

Analysis Generated

Aug 07, 2026 - 12:51 vuln.today

CVE Published

Aug 07, 2026 - 12:14 cve.org

MEDIUM 6.5

DescriptionCVE.org

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

AnalysisAI

Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged remote attackers to read arbitrary files from the underlying server filesystem. The flaw (CWE-23) affects managed node components across Windows, RHEL 8.10, RHEL 9.4, and SLES 15 deployments, as confirmed by Dell advisory DSA-2026-326. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the high confidentiality impact in a privileged server management context elevates practical risk beyond the moderate CVSS base score alone.