EUVD-2026-81427
GHSA-rvph-x6c8-qj62
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
AC:H because exploiting a weak crypto algorithm needs a MITM position or cryptanalysis; PR:N/UI:N unauthenticated network reach; confidentiality-only limited disclosure so C:L, I:N, A:N.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
AnalysisAI
Information disclosure in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 stems from use of a broken or risky cryptographic algorithm in the product's network communication, which an unauthenticated remote attacker could leverage to expose limited information (CVSS 3.1: 3.7, AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). The high attack-complexity metric indicates that realistic exploitation requires a privileged man-in-the-middle position on the path to the managed node or offline cryptanalysis of captured management traffic, not a single direct request, and there is no integrity or availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to defeat or leverage the broken/risky cryptographic algorithm used by OMSA managed-node network communication, which per the AC:H metric typically demands a privileged man-in-the-middle position on the path to the server or offline cryptanalysis rather than a single direct request. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely low-priority issue, and the multi-source signals agree on that. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Dell OpenManage Server Administrator managed nodes to version 11.1.0.3 or later on every affected platform (Windows managed-node patch package, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04), following Dell advisory DSA-2026-403 at https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv - since the underlying weakness is the cryptographic algorithm itself, configuration-only changes are unlikely to fully remove the risk and patching is the primary fix. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated, network-reachable access to Dell OpenManage Server Administrator (OMSA) managed-node installations prio
Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today