EUVD-2026-81627
GHSA-54wc-fj6m-fj8j
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Network-reachable management interface (AV:N) but the flaw demands an already high-privileged actor (PR:H); no user interaction, unchanged scope, and full C/I/A compromise of the node.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 lets a network-positioned attacker who already holds high privileges escalate to full control of the managed node, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base 7.2). The underlying weakness is improper privilege management (CWE-269) reachable over the OMSA network management interface with low complexity and no user interaction, affecting Windows managed-node patch installations as well as managed nodes on RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to ALREADY hold high privileges (PR:H) on a Dell OpenManage Server Administrator managed node running a version prior to 11.1.0.3, reachable over the network management interface (AV:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base 7.2) is internally consistent with the description: a network-reachable but HIGH-privileged attacker escalates to full confidentiality/integrity/availability compromise of the managed node. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell OpenManage Server Administrator to 11.1.0.3 or later (vendor-released patch: 11.1.0.3), applying the managed node patch for Windows and the matching managed node package for RHEL 8.10, RHEL 9.4, SLES 15, or Ubuntu 22.04 as documented in Dell advisory DSA-2026-403 (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 on Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, and restrict network access to the OMSA management interface to only trusted management networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today