CVE Intelligence
Analysis AI-assisted

CVE-2026-41120: Dell Wyse Management Suite Untrusted Data Acceptance Flaw Enabling Remote Code Execution

CVE-2026-41120 affects Dell Wyse Management Suite in versions prior to WMS 5.5 HF1. The record classifies it as CWE-349 and reports a CNA CVSS 3.1 base score of 9.8 (critical) that describes a network-reachable attack requiring no privileges or user interaction. No confirmed exploitation appears in the sources consulted, and the record lists no fixed version, so administrators should consult the vendor advisory.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-41120 affects Dell Wyse Management Suite in versions prior to WMS 5.5 HF1. The record maps it to CWE-349 and describes it as acceptance of extraneous untrusted data together with trusted data, which can lead to remote code execution.

Impact

  • The description states that a low privileged attacker with remote access could potentially exploit the flaw to achieve Remote Code Execution.
  • The CNA-provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) corresponds to a base score of 9.8, rated critical, with high impact on confidentiality, integrity and availability.
  • Note that the vector indicates no privileges required, which is more permissive than the low privilege wording in the description.

Affected products and versions

  • Product: Dell Wyse Management Suite.
  • The description refers to versions prior to WMS 5.5 HF1.
  • The structured affected list in the record shows versions below 5.5 and version 5.5, which does not fully match the description. The exact boundary should be confirmed in the vendor advisory.

Exploitation status

  • The record shows the CISA KEV catalog flag as not listed.
  • No confirmed exploitation appears in the sources consulted.
  • No EPSS score is present in the record.

Remediation and mitigation

  • Review the vendor advisory DSA-2026-225 to identify the applicable fixed build and deployment guidance.
  • Based on the description, WMS 5.5 HF1 appears to be the first release outside the stated range; validate this in the advisory before deploying.
  • Until patched, limit network exposure of the management suite to trusted administrative networks and apply least privilege to accounts with access.

Detection guidance

  • Monitor management server logs for unexpected service behavior, unfamiliar processes or unexpected file changes on hosts running the suite.
  • Review administrative and authentication activity for anomalies at a high level.

Limitations of the available information

  • The record contains no fixed version, patch details, or CWE name.
  • The CVSS data comes from the CNA; no separate NVD or EPSS data is included in the record.
  • Technical details about the specific trusted data channel are not available in the record.

Frequently asked questions

Is CVE-2026-41120 known to be actively exploited?

The record shows the vulnerability is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.

Which Dell Wyse Management Suite versions are affected?

The description refers to versions prior to WMS 5.5 HF1, while the structured record lists versions below 5.5 and version 5.5. Confirm the exact range in the vendor advisory DSA-2026-225.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.