Dell OM SA Improper Cert Validation before 11.1.0.3
CVE-2026-81447 Published on September 17, 2026

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

Improper Certificate Validation

The software does not validate, or incorrectly validates, a certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.


Affected Versions

Dell OpenManage Server Administrator Managed Node (Patch) for Windows: Dell OpenManage Server Administrator Managed Node for RHEL 8.10: Dell OpenManage Server Administrator Managed Node for RHEL 9.4: Dell OpenManage Server Administrator Managed Node for SLES 15: Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04: