{"id":"CVE-2026-56794","state":"PUBLISHED","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially e","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.","publishedAt":"2026-08-07T12:14:54.256Z","updatedAt":"2026-08-07T13:15:11.266Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"dell"},"assigner":"dell","products":["Dell Dell OpenManage Server Administrator Managed Node (Patch) for Windows","Dell Dell OpenManage Server Administrator Managed Node for RHEL 8.10","Dell Dell OpenManage Server Administrator Managed Node for RHEL 9.4","Dell Dell OpenManage Server Administrator Managed Node for SLES 15"],"affected":[{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilities"],"weaknesses":["CWE-23"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/56xxx/CVE-2026-56794.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-56794","state":"PUBLISHED","datePublished":"2026-08-07T12:14:54.256Z","dateUpdated":"2026-08-07T13:15:11.266Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-06-23T05:04:35.872Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker."}],"affected":[{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.2","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-23","lang":"en","description":"CWE-23: Relative Path Traversal","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-08-07T12:14:54.256Z"},"datePublic":"2026-08-03T06:30:00.000Z","credits":[{"lang":"en","value":"CVE-2026-56794: Dell would like to thank Huynh Dinh Vu (WinD39) and Huynh Dinh Van for reporting this issue.","type":"other"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-07T13:15:00.900379Z","id":"CVE-2026-56794","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-07T13:15:11.266Z"}}]}}}