CVE Intelligence

Dell Wyse Management Suite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dell Wyse Management Suite: 22 record(s), with affected versions and fixes.
cpe:2.3:a:dell:wyse_management_suite

CVE-2026-81240 Critical · 9.8 CWE-434 Sep 15, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81239 Critical · 9.8 CWE-434 Sep 15, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81238 Critical · 9.1 CWE-306 Sep 15, 2026
Missing Authentication for Critical Function in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-81237 Medium · 6.5 CWE-287 Sep 15, 2026
Improper Authentication in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-81236 Critical · 9.8 CWE-434 Sep 15, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81235 Medium · 4.9 CWE-325 Sep 15, 2026
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing…
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-66272 Medium · 5.3 CWE-200 Aug 14, 2026
Exposure of Sensitive Information in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-66271 High · 7.2 CWE-434 Aug 14, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-66270 High · 7.2 CWE-434 Aug 14, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-63702 Medium · 5.5 CWE-798 Aug 14, 2026
Use of Hard-coded Credentials in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-63701 High · 7.8 CWE-269 Aug 14, 2026
Improper Privilege Management in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-63700 High · 7.8 CWE-269 Aug 14, 2026
Improper Privilege Management in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-49506 High · 7.2 CWE-22 Jun 25, 2026
Path Traversal in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-41120 Critical · 9.8 CWE-349 Jun 25, 2026
Dell Wyse Management Suite Untrusted Data Acceptance Flaw Enabling Remote Code Execution (CVE-2026-41120)
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-44274 High · 7.8 CWE-59 Jun 22, 2026
Link Following in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-44273 Medium · 4.4 CWE-1392 Jun 22, 2026
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default…
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-44272 High · 8.8 CWE-89 Jun 22, 2026
SQL Injection in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-44271 High · 8.8 CWE-89 Jun 22, 2026
SQL Injection in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-23859 Low · 2.7 CWE-602 Feb 24, 2026
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement…
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass.
CVE-2026-23858 Medium · 5.4 CWE-79 Feb 24, 2026
Cross-site Scripting (XSS) in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script Injection.
CVE-2026-22766 High · 7.2 CWE-434 Feb 24, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-22765 High · 8.8 CWE-862 Feb 24, 2026
Missing Authorization in Dell Wyse Management Suite
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.