Executive brief
Dell OpenManage Server Administrator is a systems management tool used by IT administrators to configure and monitor Dell servers. A low-privileged local attacker could exploit this vulnerability to read sensitive system information, potentially compromising server configurations, credentials, or other confidential data stored on the affected system.
Technical details
CVE-2026-80356 is an exposure of sensitive information vulnerability in Dell OpenManage Server Administrator versions prior to 11.1.0.3. The vulnerability requires local access and a low-privileged user account to exploit. An attacker with these preconditions can read sensitive information that should be restricted, with high confidentiality impact and some integrity impact across system boundaries. The vulnerability has been patched in version 11.1.0.3 and later.
Affected products
- Dell OpenManage Server Administrator prior to 11.1.0.3
Timeline
- 2026-09-17: disclosed
- 2026-09-17: patched: Fix available in version 11.1.0.3