Dell OM Server Admin <11.1.0.3: Partial Str Comp leading to DoS (LPA)
CVE-2026-81479 Published on September 17, 2026

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-81479 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
HIGH

Weakness Type

Partial String Comparison

The software performs a comparison that only examines a portion of a factor before determining whether there is a match, such as a substring, leading to resultant weaknesses. For example, an attacker might succeed in authentication by providing a small password that matches the associated portion of the larger, correct password.


Affected Versions

Dell OpenManage Server Administrator Managed Node (Patch) for Windows: Dell OpenManage Server Administrator Managed Node for RHEL 8.10: Dell OpenManage Server Administrator Managed Node for RHEL 9.4: Dell OpenManage Server Administrator Managed Node for SLES 15: Dell OpenManage Server Administrator Managed Node for Ubuntu 22.04: