Vulnerabilidades do Dell Wyse Management Suite

CVE-2026-81240 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-81239 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-81238 Crítica · 9.1 CWE-306 15/09/2026

Missing Authentication for Critical Function em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81237 Média · 6.5 CWE-287 15/09/2026

Improper Authentication em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81236 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-81235 Média · 4.9 CWE-325 15/09/2026

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing…

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-66272 Média · 5.3 CWE-200 14/08/2026

Exposure of Sensitive Information em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-66271 Alta · 7.2 CWE-434 14/08/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

CVE-2026-66270 Alta · 7.2 CWE-434 14/08/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

CVE-2026-63702 Média · 5.5 CWE-798 14/08/2026

Use of Hard-coded Credentials em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-63701 Alta · 7.8 CWE-269 14/08/2026

Improper Privilege Management em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

CVE-2026-63700 Alta · 7.8 CWE-269 14/08/2026

Improper Privilege Management em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

CVE-2026-49506 Alta · 7.2 CWE-22 25/06/2026

Path Traversal em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

CVE-2026-41120 Crítica · 9.8 CWE-349 25/06/2026

Dell Wyse Management Suite: Aceitação de Dados Não Confiáveis Levando a Execução Remota de Código (CVE-2026-41120)

O Dell Wyse Management Suite, em versões anteriores ao WMS 5.5 HF1, contém uma vulnerabilidade de Aceitação de Dados Externos Não Confiáveis Junto com Dados Confiáveis. Um atacante com baixos privilégios e acesso remoto poderia potencialmente explorar esta vulnerabilidade, levando à Execução Remota de Código.

CVE-2026-44274 Alta · 7.8 CWE-59 22/06/2026

Link Following em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-44273 Média · 4.4 CWE-1392 22/06/2026

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default…

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

CVE-2026-44272 Alta · 8.8 CWE-89 22/06/2026

SQL Injection em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-44271 Alta · 8.8 CWE-89 22/06/2026

SQL Injection em Dell Wyse Management Suite

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-23859 Baixa · 2.7 CWE-602 24/02/2026

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement…

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass.

CVE-2026-23858 Média · 5.4 CWE-79 24/02/2026

Cross-site Scripting (XSS) em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script Injection.

CVE-2026-22766 Alta · 7.2 CWE-434 24/02/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-22765 Alta · 8.8 CWE-862 24/02/2026

Missing Authorization em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.