Description
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Published: 2026-02-24
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Elevation of Privileges via Missing Authorization
Action: Immediate Patch
AI Analysis

Impact

Dell Wyse Management Suite suffers from a missing authorization flaw that allows a low‑privileged attacker with remote access to increase their privileges. The vulnerability is a classic authorization bypass (CWE‑862) and can lead to full control of the affected system if exploited.

Affected Systems

The flaw exists in Dell Wyse Management Suite, versions prior to 5.5. Users running any of these older releases are exposed.

Risk and Exploitability

The CVSS score of 8.8 signals a high severity risk, while the EPSS score of less than 1% indicates that widespread exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed widespread attacks yet. However, because the flaw permits remote privilege elevation, it remains a critical risk for environments where the suite is exposed to remote networks.

Generated by OpenCVE AI on April 16, 2026 at 06:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Dell Wyse Management Suite to version 5.5 or later to apply the vendor‑supplied fix.
  • If an update cannot be applied immediately, block unauthorized remote access to the WMS by firewall or network segmentation until the patch is installed.
  • Apply the principle of least privilege to the user accounts interacting with WMS, ensuring no users have excessive rights beyond what is required for their role.

Generated by OpenCVE AI on April 16, 2026 at 06:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 16 Apr 2026 06:30:00 +0000

Type Values Removed Values Added
Title Missing Authorization in Dell Wyse Management Suite Allows Remote Elevation of Privileges

Wed, 25 Feb 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 25 Feb 2026 15:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*

Wed, 25 Feb 2026 12:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell wyse Management Suite
Vendors & Products Dell
Dell wyse Management Suite

Tue, 24 Feb 2026 19:45:00 +0000

Type Values Removed Values Added
Description Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Dell Wyse Management Suite
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-03-20T19:43:03.739Z

Reserved: 2026-01-09T18:05:08.764Z

Link: CVE-2026-22765

cve-icon Vulnrichment

Updated: 2026-02-24T21:13:58.813Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-24T20:27:46.790

Modified: 2026-02-25T14:50:10.063

Link: CVE-2026-22765

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-16T06:15:26Z

Weaknesses