CVE-2026-81235
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Risk Assessment
A high-privileged attacker can modify data in the system, compromising its integrity and potentially leading to further attacks.
Recommendation
Update Dell Wyse Management Suite to version 2605.0.3.683 or later. Until patched, restrict privileged account access and monitor data changes.
Other vulnerabilities in Dell Wyse Management Suite
See all- CVE-2026-81240High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81239High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81238High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVE-2026-81237Medium
Dell Wyse Management Suite versions prior to 2605.0.3.683 contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
- CVE-2026-81236High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-66272Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to information disclosure.
- CVE-2026-66271High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-66270High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-63702Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could exploit this, leading to unauthorized access.
- CVE-2026-63701Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could exploit this, leading to privilege escalation.
Original NVD description (English source)
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

