EUVD-2026-81578
GHSA-4h85-m296-wm22
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CSRF is network-delivered (AV:N) with no attacker auth (PR:N) but needs an authenticated victim to interact (UI:R); impact limited to low integrity/availability state changes, no confidentiality (C:N).
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
AnalysisAI
Cross-site request forgery in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote unauthenticated attacker ride an already-authenticated administrator's browser session and forge state-changing requests against the managed-node web interface, yielding limited integrity and availability impact (CVSS 3.1 5.4, Medium) rather than the code execution implied by the description's 'Remote execution' phrasing. The attacker needs no credentials (PR:N), but success depends on an OMSA administrator with an active session being induced to visit an attacker-controlled page or click a crafted link (UI:R), and the forged action only works while that session remains valid. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a victim who is an already-authenticated OMSA administrator (the CSRF rides their existing session) AND that victim must be induced to interact - visiting an attacker-controlled page or clicking a crafted link (UI:R). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a CVSS 3.1 5.4 (Medium) CSRF flaw (CWE-352) in Dell OpenManage Server Administrator (OMSA) prior to 11.1.0.3, per the Dell DSA-2026-403 advisory. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix by upgrading Dell OpenManage Server Administrator managed-node installations to 11.1.0.3 or later; per the Dell DSA-2026-403 advisory (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv), 11.1.0.3 is the release in which versions 'prior to 11.1.0.3' are remediated, so an exact patched-version confirmation beyond that baseline is not independently established by the provided data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today