OS Command Injection Vulnerability in Dell OpenManage Server Administrator Software
CVE-2026-81476

8.1HIGH

Key Information:

Vendor

Dell
Status
Openmanage Server Administrator Managed Node (patch) For Windows
Openmanage Server Administrator Managed Node For Rhel 8.10
Openmanage Server Administrator Managed Node For Rhel 9.4
Openmanage Server Administrator Managed Node For Sles 15
Vendor
CVE Published:
17 September 2026

What is CVE-2026-81476?

Dell OpenManage Server Administrator, versions leading up to 11.1.0.3, suffers from an OS Command Injection vulnerability. This issue allows an unauthenticated attacker with remote access to exploit the software, potentially leading to unauthorized remote execution of commands. This vulnerability highlights the importance of keeping server management tools updated to mitigate security risks.

Affected Version(s)

OpenManage Server Administrator Managed Node (Patch) for Windows 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 8.10 0 < 11.1.0.3

OpenManage Server Administrator Managed Node for RHEL 9.4 0 < 11.1.0.3

References

https://www.dell.com/support/kbdoc/en-us/000506586/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.