Cross-Site Request Forgery Vulnerability in Dell OpenManage Server Administrator
CVE-2026-80355

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Openmanage Server Administrator Managed Node (patch) For Windows
Openmanage Server Administrator Managed Node For Rhel 8.10
Openmanage Server Administrator Managed Node For Rhel 9.4
Openmanage Server Administrator Managed Node For Sles 15
Vendor
CVE Published:
17 September 2026

What is CVE-2026-80355?

Dell OpenManage Server Administrator contains a vulnerability that allows an unauthenticated attacker with remote access to potentially execute unauthorized commands due to inadequate protections against Cross-Site Request Forgery (CSRF). This may lead to critical security breaches if exploited, ultimately compromising system integrity and performance.

Affected Version(s)

OpenManage Server Administrator Managed Node (Patch) for Windows 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 8.10 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 9.4 0 < 11.1.0.3

References

https://www.dell.com/support/kbdoc/en-us/000506586/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank saltedfish for reporting these issues.
.