EUVD-2026-81458
GHSA-qg9h-xmrc-8w84
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Local access with existing low privileges (AV:L/PR:L), high complexity to craft the triggering input for the partial comparison flaw (AC:H); DoS-dominant impact (A:H) with only incidental C:L/I:L.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
AnalysisAI
Denial of service in Dell OpenManage Server Administrator (OMSA) managed node versions prior to 11.1.0.3 allows a low-privileged local user on an affected server to crash or disrupt the OMSA agent by supplying input that triggers a flawed partial string comparison. The issue is scored CVSS 5.8 (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H), meaning the attacker must already hold a valid low-privilege foothold on the host, high attack complexity applies because the malformed input must be crafted to specifically exercise the comparison flaw, and the realistic impact ceiling is denial of service rather than host compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires LOCAL access to a host running Dell OpenManage Server Administrator managed node prior to 11.1.0.3, plus valid low-privilege credentials on that host (PR:L) - this is not remotely reachable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate, locally-scoped issue that does NOT warrant emergency prioritization. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to upgrade Dell OpenManage Server Administrator to version 11.1.0.3 or later on every managed node, using the platform-appropriate package for Windows, RHEL 8.10, RHEL 9.4, SLES 15, or Ubuntu 22.04 as documented in Dell advisory DSA-2026-403 (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Same weakness CWE-187 – Partial String Comparison
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today