Critical Dell Wyse Management Suite Vulnerabilities Let Attackers Execute Remote Code

Gbhackers •Divya • June 29, 2026

Dell Technologies has disclosed several critical vulnerabilities in its Wyse Management Suite (WMS) that could enable remote attackers to execute arbitrary code and fully compromise affected systems. Identified under advisory DSA-2026-225, these flaws affect WMS versions prior to 5.5 HF1 and are rated from high to critical in severity, highlighting risks for enterprise environments that […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution Dell Technologies has disclosed critical vulnerabilities in its Wyse Management Suite (WMS) that allow remote attackers to execute arbitrary code. The vulnerabilities, identified as CVE-2026-41120 and CVE-2026-49506, affect WMS versions prior to 5.5 HF1. CVE-2026-41120, with a CVSS score of 9.8, enables low-privileged attackers to exploit the flaw without user interaction. CVE-2026-49506 is a path traversal vulnerability requiring high privileges for exploitation. Organizations using WMS are at risk of significant impacts on confidentiality, integrity, and availability. Dell has released a patch for these vulnerabilities, urging immediate upgrades. Security teams are advised to enhance monitoring and review access controls to mitigate risks. The vulnerabilities were disclosed by security researcher Tien Phan. 4 sources 73

Critical Dell Wyse Management Suite Vulnerabilities Let Attackers Execute Remote Code

The full story

Extracted Entities

Attack Types (1)

Platforms (1)