CVE-2026-41120
Dell Wyse Management Suite: Acceptance of Extraneous Untrusted Data With Trusted Data leading to Remote Code Execution
Description
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.
INFO
Published Date :
June 25, 2026, 1:28 p.m.
Last Modified :
June 25, 2026, 1:28 p.m.
Remotely Exploit :
Yes !
Source :
dell
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | CRITICAL | c550e75a-17ff-4988-97f0-544cde3820fe | ||||
| CVSS 3.1 | CRITICAL | MITRE-CVE | ||||
| CVSS 3.1 | CRITICAL | [email protected] |
Solution
- Update Dell Wyse Management Suite to version 5.5 HF1 or later.
- Apply all vendor-supplied security patches promptly.
- Restrict access to the management suite.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-41120 vulnerability anywhere in the article.