{"id":"CVE-2026-80356","state":"PUBLISHED","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker wi","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","publishedAt":"2026-09-17T14:38:22.873Z","updatedAt":"2026-09-17T15:26:27.602Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","source":"dell"},"assigner":"dell","products":["Dell OpenManage Server Administrator Managed Node (Patch) for Windows","Dell OpenManage Server Administrator Managed Node for RHEL 8.10","Dell OpenManage Server Administrator Managed Node for RHEL 9.4","Dell OpenManage Server Administrator Managed Node for SLES 15","Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04"],"affected":[{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for Ubuntu 22.04","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80356.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80356","state":"PUBLISHED","datePublished":"2026-09-17T14:38:22.873Z","dateUpdated":"2026-09-17T15:26:27.602Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-08-26T10:04:27.589Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure."}],"affected":[{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node (Patch) for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for RHEL 8.10","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for RHEL 9.4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for SLES 15","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]},{"vendor":"Dell","product":"OpenManage Server Administrator Managed Node for Ubuntu 22.04","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.0.3","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":7.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-09-17T14:38:22.873Z"},"datePublic":"2026-09-08T06:30:00.000Z","credits":[{"lang":"en","value":"Dell would like to thank saltedfish for reporting these issues.","type":"other"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-17T15:25:57.790569Z","id":"CVE-2026-80356","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T15:26:27.602Z"}}]}}}