Back Gbhackers

Dell Wyse Management Flaws Could Lead to Full System Compromise

Gbhackers •Divya • March 24, 2026

Security researcher Aleksandr Zhurnakov from PT Security has discovered a critical exploit chain in Dell Wyse Management Suite. By combining seemingly minor logic flaws, an attacker can achieve unauthenticated remote code execution. This attack targets the On-Premises version of the software, impacting both Standard and Pro editions. Vulnerability Details The exploit relies on two newly […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Exploit in Dell Wyse Management Suite Allows Full System Compromise Security researcher Aleksandr Zhurnakov from PT Security has identified a critical exploit chain in Dell Wyse Management Suite, affecting both Standard and Pro editions of the On-Premises software. The attack allows unauthenticated users to register devices using an empty group token, leading to complete system compromise. Attackers can exploit hidden logic flaws in Active Directory user import functions, even when these features are disabled. By manipulating the password reset feature, they can gain access to a newly created administrator account and upload a malicious script. This results in full remote code execution on the server. Dell has released a patch in version 5.5 to address these vulnerabilities, tracked under advisory DSA-2026-103. Immediate updates are recommended for all affected systems. 3 sources 73

Dell Wyse Management Flaws Could Lead to Full System Compromise

The full story

Extracted Entities

MITRE ATT&CK (1)

Platforms (1)