CVE-2026-66270
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
Risk Assessment
A remote attacker with high privileges can take control of the system, potentially leading to data confidentiality and integrity breaches.
Recommendation
It is recommended to upgrade Dell Wyse Management Suite to version 2605.0.2 or later.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.