Executive brief
Dell OpenManage Server Administrator is a remote management tool used by IT administrators to monitor and control server hardware. A vulnerability in its string comparison logic could allow a low-privileged local user to crash the service, causing temporary unavailability and disrupting server management operations.
Technical details
CVE-2026-81479 is a partial string comparison vulnerability in Dell OpenManage Server Administrator versions prior to 11.1.0.3. The vulnerability allows a low-privileged attacker with local access to exploit improper string validation logic, potentially leading to denial of service. The attack requires local system access and does not require network reachability or user interaction. An attacker can crash or disable the service, affecting availability of the management interface. The fix is available in version 11.1.0.3 and later.
Affected products
- Dell OpenManage Server Administrator prior to 11.1.0.3
Timeline
- 2026-09-17: disclosed