CVE-2026-81443 - Vulnerability Details

Description

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Published: 2026-09-17

Score: 6.4 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability is a Server‑Side Request Forgery flaw in Dell OpenManage Server Administrator versions before 11.1.0.3. An attacker with low privileged remote access can craft requests that force the server to resolve arbitrary URLs, potentially leaking internal information or enabling further attacks against the internal network.

Affected Systems

The flaw affects all Dell OpenManage Server Administrator Managed Node deployments for Windows, RHEL 8.10, RHEL 9.4, SLES 15, and Ubuntu 22.04 that are running a version earlier than 11.1.0.3.

Risk and Exploitability

The CVSS score of 6.4 indicates medium severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits yet. Based on the description, it is inferred that a low privileged attacker can trigger the SSRF over the network interface exposed by OMSA, and that the risk depends on the exposure of the OMSA management console and the internal resources reachable from it.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Dell

OpenManage Server Administrator Managed Node (Patch) for Windows

unaffected

Version	Status	Constraints
`0`	affected	< 11.1.0.3

Dell

OpenManage Server Administrator Managed Node for RHEL 8.10

unaffected

Version	Status	Constraints
`0`	affected	< 11.1.0.3

Dell

OpenManage Server Administrator Managed Node for RHEL 9.4

unaffected

Version	Status	Constraints
`0`	affected	< 11.1.0.3

Dell

OpenManage Server Administrator Managed Node for SLES 15

unaffected

Version	Status	Constraints
`0`	affected	< 11.1.0.3

Dell

OpenManage Server Administrator Managed Node for Ubuntu 22.04

unaffected

Version	Status	Constraints
`0`	affected	< 11.1.0.3

Configuration 1 [-]

cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*

No data.

Vendor Product Confidence Versions

Dell

Dell Openmanage Server Administrator Managed Node For Rhel 8.10

96%

Version	Status	Scheme	Platform
`[0,11.1.0.3)`	affected	generic	—

Dell

Dell Openmanage Server Administrator Managed Node For Rhel 9.4

96%

Version	Status	Scheme	Platform
`[0,11.1.0.3)`	affected	generic	—

Dell

Dell Openmanage Server Administrator Managed Node For Sles 15

96%

Version	Status	Scheme	Platform
`[0,11.1.0.3)`	affected	generic	—

Dell

Dell Openmanage Server Administrator Managed Node For Ubuntu 22.04

100%

Version	Status	Scheme	Platform
`[0,11.1.0.3)`	affected	generic	—

Dell

Openmanage Server Administrator Managed Node (patch) For Windows

100%

Version	Status	Scheme	Platform
`[0,11.1.0.3)`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the Dell security update that upgrades OMSA to version 11.1.0.3 or later.
Restrict outbound connections from the OMSA server so that it can reach only the required external hosts; block untrusted destinations.
Ensure that the account used by OMSA has no unnecessary privileges and runs with the principle of least privilege.
If the patch cannot be applied immediately, isolate the OMSA management interface to a trusted network segment or place it behind a firewall that limits access to internal services.

Generated by OpenCVE AI on September 17, 2026 at 22:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0023.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv

History

Tue, 06 Oct 2026 16:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell openmanage Server Administrator
CPEs		cpe:2.3:a:dell:openmanage_server_administrator::::::::
Vendors & Products		Dell openmanage Server Administrator

Sat, 19 Sep 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 18 Sep 2026 21:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell Dell dell Openmanage Server Administrator Managed Node For Rhel 8.10 Dell dell Openmanage Server Administrator Managed Node For Rhel 9.4 Dell dell Openmanage Server Administrator Managed Node For Sles 15 Dell dell Openmanage Server Administrator Managed Node For Ubuntu 22.04 Dell openmanage Server Administrator Managed Node (patch) For Windows
Vendors & Products		Dell Dell dell Openmanage Server Administrator Managed Node For Rhel 8.10 Dell dell Openmanage Server Administrator Managed Node For Rhel 9.4 Dell dell Openmanage Server Administrator Managed Node For Sles 15 Dell dell Openmanage Server Administrator Managed Node For Ubuntu 22.04 Dell openmanage Server Administrator Managed Node (patch) For Windows

Thu, 17 Sep 2026 14:00:00 +0000

Type	Values Removed	Values Added
Description		Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
Weaknesses		CWE-918
References		https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv
Metrics		cvssV3_1 `{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'}`

Subscriptions

Dell Dell Openmanage Server Administrator Managed Node For Rhel 8.10 Dell Openmanage Server Administrator Managed Node For Rhel 9.4 Dell Openmanage Server Administrator Managed Node For Sles 15 Dell Openmanage Server Administrator Managed Node For Ubuntu 22.04 Openmanage Server Administrator Openmanage Server Administrator Managed Node (patch) For Windows

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-09-17T13:52:36.356Z

Updated: 2026-09-19T14:21:53.407Z

Reserved: 2026-08-26T20:04:54.730Z

Link: CVE-2026-81443

Vulnrichment

Updated: 2026-09-19T14:15:46.884Z

NVD

Status : Analyzed

Published: 2026-09-17T14:17:31.243

Modified: 2026-10-06T16:22:42.963

Link: CVE-2026-81443

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-18T20:37:16Z

Weaknesses

CWE-918
Server-Side Request Forgery (SSRF)

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object