EUVD-2026-81671
GHSA-x5hm-677g-wc5r
Severity by source
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Adjacent-only MITM (AV:A) that requires an active interception position gives AC:H; no auth or interaction (PR:N/UI:N); broken cert trust exposes and lets tampering with management traffic (C:H/I:H) with no availability effect.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
AnalysisAI
Improper TLS certificate validation in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 allows an unauthenticated attacker who already occupies an adjacent-network position (same LAN or management VLAN) to man-in-the-middle OMSA traffic and accept a forged or invalid server certificate, resulting in disclosure and tampering of management data. The CVSS 3.1 vector (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, score 6.8) confirms adjacent access and high attack complexity are required but no credentials or user interaction are needed once a MITM foothold exists; the issue is limited to the local management plane and cannot be triggered from the public internet. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to occupy an adjacent-network position (same LAN/management VLAN, AV:A) relative to a Dell server running OpenManage Server Administrator prior to 11.1.0.3, and to actively intercept the TLS session (man-in-the-middle) so that OMSA's improper certificate validation accepts a forged or invalid certificate. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity, moderate-real-risk issue rather than an emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell OpenManage Server Administrator managed-node installations to version 11.1.0.3 or later on every affected platform (Windows patch build, RHEL 8.10, RHEL 9.4, SLES 15, Ubuntu 22.04); this is the vendor-released patch and the only complete fix, per Dell advisory DSA-2026-403 at https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution is possible against Dell OpenManage Server Administrator (OMSA) managed nodes runn
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a rem
Privilege escalation and information tampering in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allow
Unauthenticated remote compromise of Dell OpenManage Server Administrator (OMSA) managed-node installations running vers
Unauthenticated remote OS command injection in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to
A heap-based buffer overflow in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 allows an authent
Unauthenticated path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 lets a remote a
Server-side request forgery in Dell OpenManage Server Administrator versions prior to 11.1.0.3 lets remote, unauthentica
Information disclosure in Dell OpenManage Server Administrator versions prior to 11.1.0.3 allows a locally authenticated
Hard-coded credentials in Dell OpenManage Server Administrator (OMSA) managed-node builds prior to 11.1.0.3 let an unaut
Elevation of privilege in Dell OpenManage Server Administrator (OMSA) managed nodes running versions prior to 11.1.0.3 l
Remote code execution in Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3: a hea
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today