CVE-2026-81446

Published: Sep 17, 2026Modified: Oct 6, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 4.0

Source: security_alert@emc.com (Secondary)

Description

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Affected (1)

Products: Dell: Openmanage Server Administrator

1 product

Openmanage Server Administrator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Openmanage Server Administrator	version < 11.1.0.3

Related CWEs

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.