EUVD-2026-81425
GHSA-vx76-phjf-p6gq
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Unauthenticated network reachability with low complexity (AV:N/AC:L/PR:N/UI:N) is confirmed by Dell; unsafe-reflection protection bypass yields partial C/I/A rather than full compromise.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
4DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
AnalysisAI
Unauthenticated, network-reachable access to Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 can be leveraged through unsafe reflection (CWE-470) to bypass the product's protection mechanisms, an outcome Dell classifies under its DSA-2026-403 'network access vulnerabilities' advisory. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, base 7.3) means no credentials or user interaction are needed and the impact is partial across confidentiality, integrity and availability - consistent with an access-control/protection bypass rather than direct code execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitable against default configurations of Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 where the OMSA service is network-reachable - Dell frames this as a 'network access vulnerability.' Per CVSS PR:N/UI:N, no authentication or user interaction is required. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, base 7.3) describes a network-reachable, low-complexity, unauthenticated flaw with partial confidentiality, integrity, and availability impact - consistent with an unsafe-reflection (CWE-470) protection-mechanism bypass rather than direct code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to upgrade the OMSA managed node to version 11.1.0.3 or later using the packages and instructions in Dell Security Advisory DSA-2026-403 (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv); this is a vendor-released patch and covers the Windows patch build plus the RHEL 8.10, RHEL 9.4, SLES 15 and Ubuntu 22.04 managed-node packages, and the agent/managed-node component on both server platforms and monitored hosts should be updated because the vulnerable code path is shared. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Dell OpenManage Server Administrator installations and confirm which hosts run versions prior to 11.1.0.3, then immediately restrict network reachability of the OMSA management interface (TCP 1311 and any configured alternate ports) to only authorized management VLANs, jump hosts, or localhost via host and network firewall rules. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged
Share
External POC / Exploit Code
Leaving vuln.today