EUVD-2026-81615
GHSA-67m2-xqp6-5qm7
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Network-reachable web interface (AV:N/AC:L) but needs a low-privileged authenticated account (PR:L); SSRF pivots to other systems (S:C) with only limited confidentiality/integrity impact and no availability loss.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
AnalysisAI
Server-side request forgery in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 allows an authenticated low-privileged user to make the management server issue attacker-influenced outbound requests on their behalf. Dell rates the issue CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting a network-reachable flaw that requires a valid low-privileged session but no user interaction, with the scope change indicating impact can extend to resources beyond the OMSA component itself. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated low-privileged session to the OpenManage Server Administrator management/web interface (PR:L) - not exploitable pre-authentication. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity SSRF (CWE-918) rated by Dell at CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade OpenManage Server Administrator managed-node installations to 11.1.0.3 or later on every affected platform (Windows patch package, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04), following Dell security advisory DSA-2026-403 at https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv; this is the only complete fix and addresses the SSRF by correcting how the service validates outbound request targets. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today