EUVD-2026-81426
GHSA-jmgc-v66v-g384
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local low-privileged user (AV:L/PR:L) triggers a heap overflow with no user interaction (UI:N); privilege escalation yields full host compromise (C:H/I:H/A:H), scope unchanged.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
5DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Articles & Coverage 2
AnalysisAI
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authenticated local attacker with low privileges to corrupt process memory and escalate to full root/SYSTEM-level control of the managed node. Only hosts with the OMSA managed-node component installed and running are affected, across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 packages. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires pre-existing local access with low privileges on a host running Dell OpenManage Server Administrator prior to 11.1.0.3 (managed-node packages for Windows, RHEL 8.10/9.4, SLES 15, or Ubuntu 22.04). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H = 7.8 High) describes a local elevation-of-privilege primitive: an already-authenticated low-privileged user on the managed node corrupts the heap to gain full confidentiality/integrity/availability impact (privilege escalation). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell OpenManage Server Administrator to version 11.1.0.3 or later on every affected managed node - Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 - following the platform-specific instructions in Dell advisory DSA-2026-403 (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv); patching the privileged OMSA services is the only complete fix and typically requires stopping/restarting the OMSA services and may require a host reboot depending on the platform. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every host running the Dell OpenManage Server Administrator managed-node component across Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, confirm which are below version 11.1.0.3, and open a support case with Dell to obtain a remediation timeline and any pre-release fix; simultaneously restrict interactive and remote local logon on those hosts to essential administrators only and remove or disable unneeded non-privileged local accounts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in
A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio
Twonky Server 8.5.2 uses hard-coded cryptographic keys for encrypting the administrator password. Combined with the cred
Mako Server versions 2.5 and 2.6 contain an unauthenticated OS command injection via the tutorial interface at examples/
React Native Metro Development Server binds to external interfaces by default and contains an OS command injection endpo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today