CVE-2026-63702
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could exploit this, leading to unauthorized access.
Risk Assessment
The risk includes the possibility of unauthorized access to the system by an attacker with local access, potentially compromising data integrity and confidentiality.
Recommendation
It is recommended to update Dell Wyse Management Suite to version 2605.0.2 or later and change any default or hard-coded credentials.
Other vulnerabilities in Dell Wyse Management Suite
See all- CVE-2026-81240High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81239High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81238High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVE-2026-81237Medium
Dell Wyse Management Suite versions prior to 2605.0.3.683 contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
- CVE-2026-81236High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81235High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
- CVE-2026-66272Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to information disclosure.
- CVE-2026-66271High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-66270High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-63701Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could exploit this, leading to privilege escalation.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

