CVE-2026-56793

CriticalCVSS 9.8/10Last modified Aug 8, 2026

Description

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
Dell	OpenManage Server Administrator Managed Node (Patch) for Windows	< 11.1.0.2
Dell	Dell OpenManage Server Administrator Managed Node for RHEL 8.10	< 11.1.0.2
Dell	Dell OpenManage Server Administrator Managed Node for RHEL 9.4	< 11.1.0.2
Dell	Dell OpenManage Server Administrator Managed Node for SLES 15	< 11.1.0.2

References

https://www.dell.com/support/kbdoc/en-us/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesVendor Advisory

Timeline

Published: Aug 7, 2026
Last modified: Aug 8, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-567946.5Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacke CVE-2026-567958.2Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacke CVE-2026-567966.6Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.CVE-2026-567977.3Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged atta CVE-2026-56807.5A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permes CVE-2026-568088.6DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execu CVE-2026-568095.1Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting v CVE-2026-56816.3A flaw has been found in itsourcecode sanitize or validate this input 1.0. This impacts an unknown function of the file /borrowedequip.php o CVE-2026-568108.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a denial of service via an CVE-2026-568117.5Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthentic CVE-2026-568127.5Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attack CVE-2026-568132.1Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP coo