Relative Path Traversal Vulnerability in Dell OpenManage Server Administrator
CVE-2026-56794

6.5MEDIUM

Key Information:

Vendor

Dell
Status
Dell Openmanage Server Administrator Managed Node (patch) For Windows
Dell Openmanage Server Administrator Managed Node For Rhel 8.10
Dell Openmanage Server Administrator Managed Node For Rhel 9.4
Dell Openmanage Server Administrator Managed Node For Sles 15
Vendor
CVE Published:
7 August 2026

What is CVE-2026-56794?

Dell OpenManage Server Administrator, specifically versions before 11.1.0.2, contains a vulnerability that allows low privileged attackers with remote access to exploit a relative path traversal. This weakness may enable unauthorized users to gain access to the filesystem, potentially leading to exposure of sensitive data. It is crucial for administrators to update to the latest version to mitigate this risk and protect system integrity.

Affected Version(s)

Dell OpenManage Server Administrator Managed Node (Patch) for Windows 0 < 11.1.0.2

Dell OpenManage Server Administrator Managed Node for RHEL 8.10 0 < 11.1.0.2

Dell OpenManage Server Administrator Managed Node for RHEL 9.4 0 < 11.1.0.2

References

https://www.dell.com/support/kbdoc/en-us/000494958/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

CVE-2026-56794: Dell would like to thank Huynh Dinh Vu (WinD39) and Huynh Dinh Van for reporting this issue.
.