# CVE-2026-81475: Dell OpenManage Server Administrator missing authentication in critical function

Source: https://junglewise.ai/threats/cve-2026-81475-dell-openmanage-server-administrator-missing-authentication-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-17. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-81475 · Severity: high · CVSS 8.1 · Published 2026-09-17

Dell OpenManage Server Administrator is a management tool used to monitor and administer Dell servers. An unauthenticated attacker with remote access could bypass security controls and execute arbitrary code on the server, potentially compromising the entire system and any workloads it hosts.

Technologies: [Dell OpenManage Server Administrator](https://junglewise.ai/threats/technologies/openmanage-server-administrator). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-81475 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-81475 being exploited in the wild.

**How severe is CVE-2026-81475?** High severity, with a CVSS score of 8.1, published 17 September 2026.

**Which products and versions are affected?** Dell OpenManage Server Administrator prior to 11.1.0.3.

**Is there a fix for CVE-2026-81475?** A patch was published on 2026-09-17: Patch available in version 11.1.0.3 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-81475 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-81475?** Check whether you run Dell OpenManage Server Administrator at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a missing authentication control on a critical function in Dell OpenManage Server Administrator versions prior to 11.1.0.3 (CVE-2026-81475). The vulnerability allows unauthenticated attackers to access sensitive functionality remotely without providing credentials. An attacker with network access to the OMSA interface can exploit this to achieve remote code execution. The vulnerability has been addressed in version 11.1.0.3 and later through a patch distributed via Dell security advisory DSA-2026-403.

## Affected products

- Dell OpenManage Server Administrator prior to 11.1.0.3

## Timeline

- 2026-09-17: disclosed
- 2026-09-17: patched: Patch available in version 11.1.0.3

## References

- [https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv](https://www.dell.com/support/kbdoc/en-us/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv)

## Related threats

- [Dell OpenManage Server Administrator improper certificate validation](https://junglewise.ai/threats/cve-2026-81447-dell-openmanage-server-administrator-improper-certificate)
- [Dell OpenManage Server Administrator SSRF vulnerability](https://junglewise.ai/threats/cve-2026-81446-dell-openmanage-server-administrator-ssrf-vulnerability)
- [Dell OpenManage Server Administrator privilege escalation](https://junglewise.ai/threats/cve-2026-81445-dell-openmanage-server-administrator-privilege-escalation)
- [Dell OpenManage Server Administrator information exposure](https://junglewise.ai/threats/cve-2026-80356-dell-openmanage-server-administrator-information-exposure)
- [Dell OpenManage Server Administrator path traversal](https://junglewise.ai/threats/cve-2026-81453-dell-openmanage-server-administrator-path-traversal)