Use of Hard-Coded Credentials Vulnerability in Dell OpenManage Server Administrator
CVE-2026-81440

7.3HIGH

Key Information:

Vendor

Dell
Status
Openmanage Server Administrator Managed Node (patch) For Windows
Openmanage Server Administrator Managed Node For Rhel 8.10
Openmanage Server Administrator Managed Node For Rhel 9.4
Openmanage Server Administrator Managed Node For Sles 15
Vendor
CVE Published:
17 September 2026

What is CVE-2026-81440?

Dell OpenManage Server Administrator, in versions prior to 11.1.0.3, presents a security flaw through hard-coded credentials. This vulnerability allows an unauthenticated attacker with remote access to exploit the system, potentially leading to unauthorized access and control over the server's management functionalities. It is crucial for users to update to the latest version to mitigate the risk associated with this vulnerability.

Affected Version(s)

OpenManage Server Administrator Managed Node (Patch) for Windows 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 8.10 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 9.4 0 < 11.1.0.3

References

https://www.dell.com/support/kbdoc/en-us/000506586/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.