CVE-2026-56793 is a high severity (CVSS 7.7) improper authentication flaw in Dell OpenManage Server Administrator (OMSA) before version 11.1.0.2. An unauthenticated attacker with remote access could gain unauthorized access. Upgrade to 11.1.0.2 or later and read Dell's advisory DSA-2026-326.
What's affected
The record says Dell OpenManage Server Administrator versions prior to 11.1.0.2 are affected. Dell's advisory is DSA-2026-326, titled as a security update for OMSA network access vulnerabilities. The page blocked automated access, so I could not read it for this post. Confirm the fixed version, and any other fixes in the same advisory, there.
The CVSS vector is AV:N/AC:H/PR:N/UI:N, with high confidentiality and integrity impact. No account is needed, but the attacker needs conditions that raise the attack complexity.
How to check if you're exposed
OMSA runs on the managed server and listens on a management port.
- On Windows, open the OMSA web interface and read the About page, or check Programs and Features. On Linux, query the installed package with your package manager, for example rpm or dpkg.
- Anything below 11.1.0.2 falls within the record.
- Scan your network for the OMSA listener. It should be reachable only from the management network.
What to do now
- Download OMSA 11.1.0.2 or later from Dell support and read advisory DSA-2026-326.
- Roll the update out to servers, starting with those whose management port is reachable from wider networks.
- Restrict the OMSA port to a management network or specific jump hosts with firewall rules.
- If you do not use OMSA remote access, disable the service on servers where you do not need it.
- Review OMSA and system logs for unexpected remote logins.
Why it matters
The weakness is CWE-287, improper authentication. The server software can be reached over the network, and the check that confirms who is calling does not hold in some case.
Server management software runs with high privilege on hardware that holds production workloads, so flaws here have a wide effect. Treat management interfaces as sensitive infrastructure: keep them off general networks and patch them on the same schedule as the operating system. The record is not in CISA's Known Exploited Vulnerabilities catalog.
Quick check
Where do I confirm the fixed version?
The record says versions before 11.1.0.2 are affected. Dell advisory DSA-2026-326 is the authoritative source, so confirm the details there.
Sources
Last reviewed: 19 October 2026.
