EUVD-2026-81430
GHSA-x3vv-gwjf-6xhf
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated remote (AV:N/PR:N/UI:N) reaching an unprotected critical function yields full RCE (C:H/I:H/A:H); AC:H retained per vendor, reflecting non-trivial preconditions for reliable exploitation.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
AnalysisAI
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3, where a critical management function can be invoked without any authentication check (CWE-306). Affected deployments include the Windows managed-node patch plus managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, and an attacker who can reach the OMSA management interface from the network needs no credentials and no user interaction (CVSS 8.1, PR:N/UI:N), though the AC:H rating indicates the exploit path depends on conditions outside the attacker's control and is not a simple one-shot request. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to a Dell OpenManage Server Administrator managed node (versions prior to 11.1.0.3) running on Windows, RHEL 8.10/9.4, SLES 15, or Ubuntu 22.04 - the OMSA management service/port must be reachable by the attacker. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is the most serious member of the DSA-2026-403 bundle: CWE-306 (Missing Authentication for Critical Function) reachable by an unauthenticated remote attacker and leading to Remote execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade OMSA on every managed node to version 11.1.0.3 or later - vendor-released patch: 11.1.0.3, documented in Dell DSA-2026-403 at https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv - applying the Windows package and the RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 managed-node packages as appropriate, and verifying the reported version after install. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Dell OpenManage Server Administrator deployments across Windows managed-node patch and managed-node builds for RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04, and immediately restrict network access to OMSA management interfaces by placing them behind firewalls or VPNs and ensuring they are not reachable from the internet or untrusted network segments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today