EUVD-2026-38343
GHSA-v2m2-r86g-wfp5
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable management interface (AV:N), straightforward SQLi (AC:L), requires a valid low-privileged account (PR:L), no user interaction, and database compromise yields high C/I/A.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
AnalysisAI
SQL injection in Dell Wyse Management Suite (WMS) versions prior to 2605 allows authenticated low-privileged remote attackers to manipulate backend database queries, leading to unauthorized data access and potential integrity or availability impact. The CVSS 8.8 rating reflects high impact across confidentiality, integrity, and availability under low attack complexity, though no public exploit identified at time of analysis. The flaw is tagged with 'Authentication Bypass' implications, suggesting the SQLi could be leveraged to escalate beyond the attacker's initial low-privilege context.
Technical ContextAI
Dell Wyse Management Suite is a centralized management platform for Wyse thin clients and endpoints, typically deployed in enterprise environments to administer fleets of cloud client devices. The vulnerability is classified as CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), meaning user-supplied input is concatenated into SQL queries without proper parameterization or sanitization. This allows an attacker to inject arbitrary SQL syntax to read, modify, or potentially escalate within the underlying database. The CPE cpe:2.3:a:dell:wyse_management_suite_(wms):*:*:*:*:*:*:*:* indicates all versions prior to the fix are in scope.
RemediationAI
Vendor-released patch: upgrade to Dell Wyse Management Suite version 2605 or later, per Dell advisory DSA-2026-247 (https://www.dell.com/support/kbdoc/en-us/000472001/dsa-2026-247). Until patching is complete, restrict network access to the WMS management interface to a small set of trusted administrative networks via firewall ACLs or VPN gating to reduce the attack surface, accepting the trade-off that legitimate remote administration workflows may be impacted. Additionally, audit and minimize low-privilege user accounts on the WMS platform, rotate credentials, and review database and authentication logs for anomalous queries or login activity that could indicate prior exploitation.
More in Wyse Management Suite Wms
View allAuthenticated SQL injection (CWE-89) in Dell Wyse Management Suite (WMS) before version 2605 lets a low-privileged remot
Local privilege-bound symlink abuse in Dell Wyse Management Suite (WMS) versions prior to 2605 allows a low-privileged l
Privilege escalation in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 enables a local low-privileged attac
Privilege escalation in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 allows a low-privileged local attack
Remote code execution is achievable in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 via an unrestricted f
Remote code execution in Dell Wyse Management Suite (WMS) is achievable by a high-privileged, remotely authenticated att
Hard-coded credentials in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 expose management-plane access to
Remote unauthenticated information disclosure in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 allows netw
Dell Wyse Management Suite (WMS) versions prior to 2605 ships with default credentials, enabling a high-privileged local
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today