{"id":"CVE-2026-66269","state":"PUBLISHED","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An un","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.","publishedAt":"2026-09-17T10:36:39.492Z","updatedAt":"2026-09-17T14:29:59.884Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","source":"dell"},"assigner":"dell","products":["Dell Dell OpenManage Server Administrator Managed Node (Patch) for Windows","Dell Dell OpenManage Server Administrator Managed Node for RHEL 8.10","Dell Dell OpenManage Server Administrator Managed Node for RHEL 9.4","Dell Dell OpenManage Server Administrator Managed Node for SLES 15","Dell Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04"],"affected":[{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv"],"weaknesses":["CWE-470"],"ingestedAt":"2026-10-29T20:12:41.951Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/66xxx/CVE-2026-66269.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-66269","state":"PUBLISHED","datePublished":"2026-09-17T10:36:39.492Z","dateUpdated":"2026-09-17T14:29:59.884Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-07-24T11:04:27.160Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass."}],"affected":[{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseSeverity":"HIGH","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-470","lang":"en","description":"CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-09-17T10:36:39.492Z"},"datePublic":"2026-09-08T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-17T14:29:38.706461Z","id":"CVE-2026-66269","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T14:29:59.884Z"}}]}}}