CVE-2026-41120

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-in/000465356/dsa-2026-225?msockid=3021cac2195069ed3194ddad186a68f9	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dell:wyse_management_suite::::::::
	cpe:2.3:a:dell:wyse_management_suite:5.5:-::::::

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Dell Wyse Management Suite, versiones anteriores a WMS 5.5 HF1, contienen una vulnerabilidad de Aceptación de Datos Externos No Confiables con Datos Confiables. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la Ejecución Remota de Código.

Information

Published : 2026-06-25 14:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-41120

Mitre link : CVE-2026-41120

CVE.ORG link : CVE-2026-41120

JSON object : View

Products Affected

dell

wyse_management_suite

CWE

CWE-349

Acceptance of Extraneous Untrusted Data With Trusted Data

{"id": "CVE-2026-41120", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41120", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "Wyse Management Suite", "versions": [{"status": "affected", "version": "0", "lessThan": "Version 5.5 HF1 or later", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-25T14:16:39.140", "references": [{"url": "https://www.dell.com/support/kbdoc/en-in/000465356/dsa-2026-225?msockid=3021cac2195069ed3194ddad186a68f9", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-349"}]}], "descriptions": [{"lang": "en", "value": "Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution."}, {"lang": "es", "value": "Dell Wyse Management Suite, versiones anteriores a WMS 5.5 HF1, contienen una vulnerabilidad de Aceptaci\u00f3n de Datos Externos No Confiables con Datos Confiables. Un atacante con privilegios bajos con acceso remoto podr\u00eda potencialmente explotar esta vulnerabilidad, lo que llevar\u00eda a la Ejecuci\u00f3n Remota de C\u00f3digo."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2785B726-7FD1-41C8-91F9-46100C01E215", "versionEndExcluding": "5.5"}, {"criteria": "cpe:2.3:a:dell:wyse_management_suite:5.5:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D51B5AAD-1426-40D2-9D2C-6825255274B3"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}