CVE-2026-80356: Dell OpenManage Server Administrator information exposure

CVE-2026-80356 · Severity: high · CVSS 7.3 · Published 2026-09-17

Dell OpenManage Server Administrator is a systems management tool used by IT administrators to configure and monitor Dell servers. A low-privileged local attacker could exploit this vulnerability to read sensitive system information, potentially compromising server configurations, credentials, or other confidential data stored on the affected system.

Technologies: Dell OpenManage Server Administrator. Vendors: Dell.

Quick answers

Is CVE-2026-80356 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-80356 being exploited in the wild.
How severe is CVE-2026-80356?
High severity, with a CVSS score of 7.3, published 17 September 2026.
Which products and versions are affected?
Dell OpenManage Server Administrator prior to 11.1.0.3.
Is there a fix for CVE-2026-80356?
A patch was published on 2026-09-17: Fix available in version 11.1.0.3 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-80356 attacked?
It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-80356?
Check whether you run Dell OpenManage Server Administrator at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-80356 is an exposure of sensitive information vulnerability in Dell OpenManage Server Administrator versions prior to 11.1.0.3. The vulnerability requires local access and a low-privileged user account to exploit. An attacker with these preconditions can read sensitive information that should be restricted, with high confidentiality impact and some integrity impact across system boundaries. The vulnerability has been patched in version 11.1.0.3 and later.

Affected products

  • Dell OpenManage Server Administrator prior to 11.1.0.3

Timeline

  • 2026-09-17: disclosed
  • 2026-09-17: patched: Fix available in version 11.1.0.3

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.