EUVD-2026-81664
GHSA-34xp-g284-rggr
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Network SSRF, unauthenticated but needing user interaction (UI:R); server-side fetch crosses trust boundary (S:C) exposing internal data (C:H) with no integrity/availability impact.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
AnalysisAI
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthenticated attackers who can induce a user interaction coerce the management agent into issuing requests to attacker-chosen internal or external targets, exposing sensitive internal services such as management APIs and cloud metadata endpoints. The flaw (CWE-918) is rated CVSS 3.1 7.4 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N), with the scope-change and confidentiality-high components reflecting that forged traffic escapes the OMSA trust boundary while integrity and availability are unaffected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a network-reachable Dell OpenManage Server Administrator instance prior to version 11.1.0.3 and, per the CVSS vector, user interaction (UI:R) - the attacker must induce a legitimate user/operator to trigger the malicious request rather than exploiting fully autonomously. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine medium-to-high severity SSRF (CWE-918) in Dell OpenManage Server Administrator, a management agent deployed across Dell PowerEdge server fleets. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell OpenManage Server Administrator to 11.1.0.3 or later on every managed node; Dell's DSA-2026-403 advisory (https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv) documents the fixed build and the platform-specific package versions for Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 - this is a vendor-released patch, and because the flaw is bundled with other OMSA network access fixes, applying the full 11.1.0.3 update rather than a partial component upgrade is advisable. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Dell OpenManage Server Administrator (OMSA) deployments and identify any running versions prior to 11.1.0.3; immediately restrict OMSA web interface access to trusted management VLANs or VPN-only administrative networks, remove any direct internet exposure, and add egress firewall/ACL rules on OMSA hosts to block access to cloud metadata endpoints (e.g., 169.254.169.254) and sensitive internal management APIs. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today