CVE-2026-81476: OS Command Injection
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Server Administratorto a version that resolves this vulnerability.Fixed in 11.1.0.3
Event History
Frequently Asked Questions
Which systems are exposed to remote exploitation?
Dell OpenManage Server Administrator installations running versions earlier than 11.1.0.3 are affected if an unauthenticated attacker can reach them remotely.
Does an attacker need credentials or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated remote attacker and does not require user interaction.
What is the potential impact of successful exploitation?
Successful exploitation could lead to remote code execution, with high impact to confidentiality, integrity, and availability.
What version addresses the issue?
Update Dell OpenManage Server Administrator to version 11.1.0.3 or later. Versions prior to 11.1.0.3 are identified as affected.