Dell Openmanage Server Administrator Managed Node Patch For Windows
Monthly
Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged remote attackers to read arbitrary files from the underlying server filesystem. The flaw (CWE-23) affects managed node components across Windows, RHEL 8.10, RHEL 9.4, and SLES 15 deployments, as confirmed by Dell advisory DSA-2026-326. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the high confidentiality impact in a privileged server management context elevates practical risk beyond the moderate CVSS base score alone.
Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged remote attackers to read arbitrary files from the underlying server filesystem. The flaw (CWE-23) affects managed node components across Windows, RHEL 8.10, RHEL 9.4, and SLES 15 deployments, as confirmed by Dell advisory DSA-2026-326. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the high confidentiality impact in a privileged server management context elevates practical risk beyond the moderate CVSS base score alone.