{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-81447", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "state": "PUBLISHED", "assignerShortName": "dell", "dateReserved": "2026-08-26T20:04:54.730Z", "datePublished": "2026-09-17T14:47:54.450Z", "dateUpdated": "2026-09-17T19:19:37.987Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2026-09-17T14:47:54.450Z"}, "datePublic": "2026-09-08T06:30:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation", "type": "CWE"}]}], "affected": [{"vendor": "Dell", "product": "OpenManage Server Administrator Managed Node (Patch) for Windows", "versions": [{"status": "affected", "version": "0", "lessThan": "11.1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "OpenManage Server Administrator Managed Node for RHEL 8.10", "versions": [{"status": "affected", "version": "0", "lessThan": "11.1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "OpenManage Server Administrator Managed Node for RHEL 9.4", "versions": [{"status": "affected", "version": "0", "lessThan": "11.1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "OpenManage Server Administrator Managed Node for SLES 15", "versions": [{"status": "affected", "version": "0", "lessThan": "11.1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "OpenManage Server Administrator Managed Node for Ubuntu 22.04", "versions": [{"status": "affected", "version": "0", "lessThan": "11.1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering."}]}], "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 6.8, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}}], "credits": [{"lang": "en", "value": "Dell would like to thank saltedfish for reporting these issues.", "type": "other"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-17T17:15:08.614487Z", "id": "CVE-2026-81447", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T19:19:37.987Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "OpenManage Server Administrator Managed Node (Patch) for Windows", "vendor": "Dell", "versions": [{"lessThan": "11.1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "OpenManage Server Administrator Managed Node for RHEL 8.10", "vendor": "Dell", "versions": [{"lessThan": "11.1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "OpenManage Server Administrator Managed Node for RHEL 9.4", "vendor": "Dell", "versions": [{"lessThan": "11.1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "OpenManage Server Administrator Managed Node for SLES 15", "vendor": "Dell", "versions": [{"lessThan": "11.1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "OpenManage Server Administrator Managed Node for Ubuntu 22.04", "vendor": "Dell", "versions": [{"lessThan": "11.1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security_alert@emc.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering."}], "id": "CVE-2026-81447", "lastModified": "2026-09-17T20:18:40.100", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.2, "source": "security_alert@emc.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-81447", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-09-17T17:15:08.614487Z", "version": "2.0.3"}}]}, "published": "2026-09-17T15:16:52.697", "references": [{"source": "security_alert@emc.com", "url": "https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "security_alert@emc.com", "type": "Secondary"}]}

{}

{"created": "2026-09-17T21:00:17.399703+00:00", "title": "Improper Certificate Validation in Dell OpenManage Server Administrator Leading to Information Disclosure", "updated": "2026-09-17T21:00:17.399710+00:00", "vendors": []}