What is the CVSS score of CVE-2026-22765?

CVE-2026-22765 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Wyse Management Suite are affected by CVE-2026-22765?

Dell Wyse Management Suite versions before 5.5 contain a critical authorization flaw that allows remote attackers with basic system access to escalate privileges and gain administrative control.

How to fix or mitigate CVE-2026-22765?

Within 24 hours: Inventory all Dell Wyse Management Suite deployments and document current versions; restrict network access to WMS consoles to trusted administrative networks only. Within 7 days: Implement enhanced monitoring and logging for WMS authentication and privilege escalation attempts; engage Dell support for upgrade timelines and workarounds. Within 30 days: Execute upgrade to WMS 5.5 or later; validate patch deployment across all WMS instances and conduct security testing.

Wyse Management Suite CVE-2026-22765

HIGH

Missing Authorization (CWE-862)

2026-02-24 security_alert@emc.com

Authentication Bypass Dell Wyse Management Suite

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 20:27 nvd

HIGH 8.8

DescriptionCVE.org

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.

AnalysisAI

Dell Wyse Management Suite versions prior to 5.5 suffer from improper access controls that allow authenticated remote attackers to escalate their privileges. An attacker with low-level credentials can bypass authorization checks to gain high-privilege access to the system, potentially compromising confidentiality, integrity, and availability. No patch is currently available for this vulnerability.

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Wyse Management Suite. Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.