CVE-2026-44274
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 is due to improper link resolution before file access. It allows a low-privileged attacker with local access to gain unauthorized access.
Risk Assessment
The risk involves potential privilege escalation or unauthorized file read/write by a local user, which could compromise system confidentiality and integrity.
Recommendation
Immediately update Dell Wyse Management Suite to version 2605 or later, which includes a fix for this vulnerability.
Other vulnerabilities in Dell Wyse Management Suite (WMS) wersje przed 2605
See all- CVE-2026-44273Medium
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 involves the use of default credentials. It allows an attacker with high privileges and local access to disclose sensitive information.
- CVE-2026-44272High
An SQL Injection vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 allows a low-privileged attacker to remotely execute unauthorized database queries. The flaw is due to improper neutralization of special elements used in SQL commands.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.