CVE Catalog

CVE-2026-63700

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Incorrect Default Permission vulnerability. A low privileged attacker with local access can exploit this to achieve privilege escalation.

Risk Assessment

A local attacker with low privileges can gain higher privileges, potentially leading to full system compromise.

Recommendation

It is recommended to upgrade Dell Wyse Management Suite to version 2605.0.2 or later and review default permissions.

Original NVD description (English source)

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS