CVE-2026-81439
LowCVSS 3.7Summary
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Risk Assessment
A low privileged remote attacker can bypass protection mechanisms, gaining access to functions or data they should not be authorized for. This can lead to privilege escalation and compromise of system security.
Recommendation
Update Dell OpenManage Server Administrator to version 11.1.0.3 or later. Restrict remote access to trusted networks and users.
Other vulnerabilities in Dell OpenManage Server Administrator
See all- CVE-2026-81474High
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a heap-based buffer overflow vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability.
- CVE-2026-81438Low
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
- CVE-2026-66269High
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a use of externally-controlled input to select classes or code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability.
- CVE-2026-56794Medium
Dell OpenManage Server Administrator versions prior to 11.1.0.2 contain a Relative Path Traversal vulnerability. A low privileged attacker with remote access could exploit this to gain filesystem access.
- CVE-2026-56793High
Dell OpenManage Server Administrator versions prior to 11.1.0.2 contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
Original NVD description (English source)
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.