CVE-2026-81476
Critical
9.8 CVSS v3.1
- Published
- Sep 17, 2026
- Updated
- Oct 1, 2026
- Vendor
- Dell
- Affected versions
- See affected products
- Weakness
- CWE-78
Summary
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Severity
Critical (9.8)CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
- Dell Openmanage Server Administrator < 11.1.0.3
Exploitation status
Unknown
Technical details
Technical analysis has not been written for this record yet.
Mitigation & remediation
Follow the vendor advisory linked below for patches and workarounds.