DSA-2026-326: Security Update for Dell OpenManage Server Administrator (OMSA) Network Access Vulnerabilities

Riepilogo: Dell OpenManage Server Administrator (OMSA) remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Impatto

High

Dettagli

Proprietary Code CVE

Description

CVSS Base Score

CVSS Vector String

CVE-2026-56793

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

7.7

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-56794

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVE

Description

CVSS Base Score

CVSS Vector String

CVE-2026-56793

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

7.7

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-56794

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Product

Affected Versions

Remediated Versions

Link

Dell OpenManage Server Administrator Managed Node (Patch) for Windows

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=4WVX8

Dell OpenManage Server Administrator Managed Node for RHEL 8.10

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=FM0PC

Dell OpenManage Server Administrator Managed Node for RHEL 9.4

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=HWPHM

Dell OpenManage Server Administrator Managed Node for SLES 15

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=31TFR

 

Product

Affected Versions

Remediated Versions

Link

Dell OpenManage Server Administrator Managed Node (Patch) for Windows

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=4WVX8

Dell OpenManage Server Administrator Managed Node for RHEL 8.10

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=FM0PC

Dell OpenManage Server Administrator Managed Node for RHEL 9.4

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=HWPHM

Dell OpenManage Server Administrator Managed Node for SLES 15

Versions prior to 11.1.0.2

Version 11.1.0.2

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=31TFR

 

Cronologia delle revisioni

Revision

Date

Description

1.0

2026-08-03

Initial Release

 

Ringraziamenti

  • CVE-2026-56793: Dell would like to thank Huynh Dinh Vu (WinD39) for reporting this issue.
  • CVE-2026-56794: Dell would like to thank Huynh Dinh Vu (WinD39) and Huynh Dinh Van for reporting this issue.

Informazioni correlate

Prodotti interessati

OpenManage Server Administrator
Proprietà dell'articolo
Numero articolo: 000494958
Tipo di articolo: Dell Security Advisory
Ultima modifica: 03 ago 2026
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.