CVE-2026-80355

Summary

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected Software

VendorProductVersion RangeStatus
DellOpenManage Server Administrator Managed Node (Patch) for Windows0 < 11.1.0.3affected
DellOpenManage Server Administrator Managed Node for RHEL 8.100 < 11.1.0.3affected
DellOpenManage Server Administrator Managed Node for RHEL 9.40 < 11.1.0.3affected
DellOpenManage Server Administrator Managed Node for SLES 150 < 11.1.0.3affected
DellOpenManage Server Administrator Managed Node for Ubuntu 22.040 < 11.1.0.3affected

Weaknesses

  • CWE-352: CWE-352: Cross-Site Request Forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References