EUVD-2026-78910
GHSA-jfh6-5x9c-pw3g
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Unauthenticated remote file upload yielding code execution implies full host compromise (C/I/A:H); vendor's C:L/A:L appears understated for a stated RCE, though impact scope is not fully documented.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
AnalysisAI
Unauthenticated remote code execution in Dell Wyse Management Suite (WMS) lets any remote attacker who can reach the management/web interface upload a file of a dangerous type and have it executed on the WMS server, affecting all releases prior to 2605.0.3.683. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no credentials and no user interaction are required, so the only meaningful barrier is network reachability of the WMS console; this presents as a high-priority exposure for any organization with the console exposed beyond a trusted management network. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The affected component is the Dell Wyse Management Suite server (any version prior to 2605.0.3.683) with its management/web upload interface reachable over the network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-priority issue on paper: the vendor CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes remote, low-complexity, unauthenticated exploitation with no user interaction - the worst-case access profile - and the description explicitly states it leads to remote code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Dell Wyse Management Suite to version 2605.0.3.683 or later, following Dell advisory DSA-2026-387 (https://www.dell.com/support/kbdoc/en-us/000502744/dsa-2026-387-security-update-for-dell-wyse-management-suite-wms-for-multiple-vulnerabilities) - this is the only confirmed fix level in the available data and should be treated as mandatory given the unauthenticated, no-interaction attack profile. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Dell Wyse Management Suite (WMS) instances, identify any release prior to 2605.0.3.683, and immediately restrict the management/web interface to a trusted management VLAN, VPN, or explicit allowlist; remove direct internet exposure and block untrusted sources at the perimeter. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Wyse Management Suite
View allRemote code execution affects Dell Wyse Management Suite in all versions prior to WMS 5.5 HF1, stemming from the applica
Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticat
Dell Wyse Management Suite versions prior to 5.5 suffer from improper access controls that allow authenticated remote at
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. Rated high sever
Unauthenticated remote code execution affects Dell Wyse Management Suite deployments running any version prior to 2605.0
Unauthenticated remote attackers can upload files of dangerous type to Dell Wyse Management Suite deployments running ve
Dell Wyse Management Suite versions prior to 5.2 contain an Absolute Path Traversal vulnerability (CWE-36) that allows u
Information tampering in Dell Wyse Management Suite (WMS) releases prior to 2605.0.3.683 is possible because the console
Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Rated high severity (CVS
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Querie
A information disclosure vulnerability in an Exposure of Sensitive Information (CVSS 7.5). High severity vulnerability r
Missing authentication for a critical function in Dell Wyse Management Suite (WMS) releases prior to 2605.0.3.683 allows
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today