CVE 2026 49506

nvd.nist.gov • June 29, 2026

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution Dell Technologies has disclosed critical vulnerabilities in its Wyse Management Suite (WMS) that allow remote attackers to execute arbitrary code. The vulnerabilities, identified as CVE-2026-41120 and CVE-2026-49506, affect WMS versions prior to 5.5 HF1. CVE-2026-41120, with a CVSS score of 9.8, enables low-privileged attackers to exploit the flaw without user interaction. CVE-2026-49506 is a path traversal vulnerability requiring high privileges for exploitation. Organizations using WMS are at risk of significant impacts on confidentiality, integrity, and availability. Dell has released a patch for these vulnerabilities, urging immediate upgrades. Security teams are advised to enhance monitoring and review access controls to mitigate risks. The vulnerabilities were disclosed by security researcher Tien Phan. 4 sources 73

CVE 2026 49506

The full story

Extracted Entities

CWE Weaknesses (1)

Vulnerabilities (1)