CVE-2026-66269
HighCVSS 7.3Summary
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a use of externally-controlled input to select classes or code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability.
Risk Assessment
Successful exploitation could lead to a protection mechanism bypass, potentially exposing the system to further attacks.
Recommendation
Update Dell OpenManage Server Administrator to version 11.1.0.3 or later.
Other vulnerabilities in Dell OpenManage Server Administrator
See all- CVE-2026-81474High
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a heap-based buffer overflow vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability.
- CVE-2026-81439Low
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-81438Low
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
- CVE-2026-56794Medium
Dell OpenManage Server Administrator versions prior to 11.1.0.2 contain a Relative Path Traversal vulnerability. A low privileged attacker with remote access could exploit this to gain filesystem access.
- CVE-2026-56793High
Dell OpenManage Server Administrator versions prior to 11.1.0.2 contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
Original NVD description (English source)
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.