Dell Wyse Management Suite (WMS) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Wyse Management Suite (WMS): 10 record(s), with affected versions and fixes.
CVE-2026-66272
Medium · 5.3
CWE-200 Aug 14, 2026
Exposure of Sensitive Information in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-66271
High · 7.2
CWE-434 Aug 14, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-66270
High · 7.2
CWE-434 Aug 14, 2026
Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
CVE-2026-63702
Medium · 5.5
CWE-798 Aug 14, 2026
Use of Hard-coded Credentials in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-63701
High · 7.8
CWE-269 Aug 14, 2026
Improper Privilege Management in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-63700
High · 7.8
CWE-269 Aug 14, 2026
Improper Privilege Management in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2026-44274
High · 7.8
CWE-59 Jun 22, 2026
Link Following in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-44273
Medium · 4.4
CWE-1392 Jun 22, 2026
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default…
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-44272
High · 8.8
CWE-89 Jun 22, 2026
SQL Injection in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-44271
High · 8.8
CWE-89 Jun 22, 2026
SQL Injection in Dell Wyse Management Suite
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.