References https://www.anquanke.com/post/id/255237 https://github.com/microsoft/omi/security/advisories/GHSA-g5q2-fwfm-qw8q https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647 https://nvd.nist.gov/vuln/detail/CVE-2021-38647 https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://zone.huoxian.cn/d/2599-omicve-2022-29149azure-omi https://netc.shcmusic.edu.cn/2021/0918/c1811a34213/pagem.htm https://blog.nsfocus.net/omi/ https://www.tenable.com/plugins/nessus/153486 https://www.cyber.gov.au/about-us/alerts/remote-code-execution-vulnerability-present-open-management-infrastructure-affects-certain-microsoft-azure-services https://www.quorumcyber.com/threat-intelligence/azure-open-management-infrastructure-exploits-omigod/
Related VulnerabilitiesPoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret Disclosure研華科技|Hospital Queuing Management - 存在2個漏洞FOGProject /fog/management/export.php 信息泄露漏洞(CVE-2025-58443)Campcodes Online Loan Management System /ajax.php SQL 注入漏洞(CVE-2025-9744)PoChazelcast-management-exposure: Hazelcast Management Center - Configuration ExposureIEI 威強電工業電腦|iRM-IEI Remote Management - 存在2個漏洞Four-Faith F3x36 /Management.asp 默认口令漏洞(CVE-2024-9643)Arcserve Unified Data Protection /management/wizardLogin 权限绕过漏洞(CVE-2024-0799)PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassPoCwyse-devicegroup-register: Dell Wyse Management Suite - Unauthenticated Device Registration深信服运维安全管理系统 /fort/system;help/concentration_management/uninstall_patch 命令执行漏洞深信服运维安全管理系统 /fort/system;help/concentration_management/del_patch 命令执行漏洞WSO2 Management 存在SSRF漏洞(CVE-2025-5350)