CVE-2026-44272
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
An SQL Injection vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 allows a low-privileged attacker to remotely execute unauthorized database queries. The flaw is due to improper neutralization of special elements used in SQL commands.
Risk Assessment
An attacker could gain unauthorized access to data managed by WMS, potentially leading to information disclosure or system integrity compromise.
Recommendation
Immediately update Dell Wyse Management Suite to version 2605 or later, which includes a fix for this vulnerability.
Other vulnerabilities in Dell Wyse Management Suite (WMS) wersje przed 2605
See all- CVE-2026-44274High
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 is due to improper link resolution before file access. It allows a low-privileged attacker with local access to gain unauthorized access.
- CVE-2026-44273Medium
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 involves the use of default credentials. It allows an attacker with high privileges and local access to disclose sensitive information.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.