What is the CVSS score of CVE-2026-22766?

CVE-2026-22766 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Wyse Management Suite are affected by CVE-2026-22766?

Dell Wyse Management Suite deployments running versions prior to 5.5 are vulnerable to remote code execution attacks by high-privileged threat actors.. A patch is available.

How to fix or mitigate CVE-2026-22766?

Within 24 hours: Identify all systems running Dell Wyse Management Suite versions prior to 5.5 and document their network location and business criticality. Within 7 days: Apply available patches to all affected instances, prioritizing production management servers. Within 30 days: Validate patch deployment across the entire environment and update vulnerability management records.

Wyse Management Suite CVE-2026-22766

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-24 security_alert@emc.com

File Upload Dell Wyse Management Suite

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

Patch released

Feb 25, 2026 - 14:50 nvd

Patch available

CVE Published

Feb 24, 2026 - 20:27 nvd

HIGH 7.2

DescriptionCVE.org

Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

AnalysisAI

Remote code execution in Dell Wyse Management Suite versions before 5.5 via unrestricted file upload allows high-privileged attackers with network access to execute arbitrary commands on affected systems. The vulnerability stems from insufficient validation of uploaded file types, enabling attackers to bypass security controls and gain code execution. A patch is available for affected organizations to remediate this risk.

Technical ContextAI

Classified as CWE-434 (Unrestricted Upload of File with Dangerous Type). Affects Wyse Management Suite. Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

RemediationAI

A vendor patch is available — apply it immediately. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.