{"id":"CVE-2026-56793","state":"PUBLISHED","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentiall","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.","publishedAt":"2026-08-07T12:08:13.744Z","updatedAt":"2026-08-08T03:55:28.341Z","severity":{"score":7.7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","source":"dell"},"assigner":"dell","products":["Dell OpenManage Server Administrator Managed Node (Patch) for Windows","Dell Dell OpenManage Server Administrator Managed Node for RHEL 8.10","Dell Dell OpenManage Server Administrator Managed Node for RHEL 9.4","Dell Dell OpenManage Server Administrator Managed Node for SLES 15"],"affected":[{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilities"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/56xxx/CVE-2026-56793.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-56793","state":"PUBLISHED","datePublished":"2026-08-07T12:08:13.744Z","dateUpdated":"2026-08-08T03:55:28.341Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-06-23T05:04:35.872Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access."}],"affected":[{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseSeverity":"HIGH","baseScore":7.7,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","lang":"en","description":"CWE-287: Improper Authentication","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-08-07T12:08:13.744Z"},"datePublic":"2026-08-03T06:30:00.000Z","credits":[{"lang":"en","value":"CVE-2026-56793: Dell would like to thank Huynh Dinh Vu (WinD39) for reporting this issue.","type":"other"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-07T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-56793"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-08T03:55:28.341Z"}}]}}}