CVE-2026-81237
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Dell Wyse Management Suite versions prior to 2605.0.3.683 contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
Risk Assessment
An unauthenticated remote attacker could gain unauthorized access to the management system, potentially leading to control over managed devices.
Recommendation
Update Dell Wyse Management Suite to version 2605.0.3.683 or later and restrict network access to the management interface.
Other vulnerabilities in Dell Wyse Management Suite
See all- CVE-2026-81240High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81239High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81238High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVE-2026-81236High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-81235High
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
- CVE-2026-66272Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to information disclosure.
- CVE-2026-66271High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-66270High
Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.
- CVE-2026-63702Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could exploit this, leading to unauthorized access.
- CVE-2026-63701Medium
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could exploit this, leading to privilege escalation.
Original NVD description (English source)
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS