{"id":"CVE-2026-80355","aliases":["EUVD-2026-81578","GHSA-4h85-m296-wm22"],"status":"published","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request...","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00205,"percentile":0.105,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2026-09-17T13:40:34Z","modified":"2026-10-06T16:22:18Z","products":[{"vendor":"dell","product":"openmanage server administrator managed node (patch) for windows"},{"vendor":"dell","product":"openmanage server administrator managed node for rhel 8.10"},{"vendor":"dell","product":"openmanage server administrator managed node for rhel 9.4"},{"vendor":"dell","product":"openmanage server administrator managed node for sles 15"},{"vendor":"dell","product":"openmanage server administrator managed node for ubuntu 22.04"},{"vendor":"dell","product":"openmanage_server_administrator"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80355"},{"url":"https://github.com/advisories/GHSA-4h85-m296-wm22"}],"sources":{"cve":[{"id":"CVE-2026-80355","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","status":"published","published":"2026-09-17T13:40:34.59Z","modified":"2026-09-18T14:54:42.61Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T13:45:36.695039Z"}],"euvd":[{"id":"EUVD-2026-81578","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","status":"published","published":"2026-09-17T13:40:34Z","modified":"2026-09-18T14:54:42Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T17:28:08.412343Z"}],"ghsa":[{"id":"GHSA-4h85-m296-wm22","title":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request...","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","status":"published","published":"2026-09-17T15:32:14Z","modified":"2026-09-17T15:32:33Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:12:05.417571Z"}],"nvd":[{"id":"CVE-2026-80355","description":"Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","status":"published","published":"2026-09-17T14:17:30.997Z","modified":"2026-10-06T16:22:18.217Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:12:49.013904Z"}]}}