Back Cybersecuritynews

Dell Wyse Management Vulnerabilities Enables Complete System Compromise

Cybersecuritynews •Abinaya • March 24, 2026

A recent security analysis has revealed how chaining seemingly minor logic flaws in Dell Wyse Management Suite (WMS) On-Premises can result in a complete system compromise. Security researchers demonstrated that combining two distinct vulnerabilities allows an unauthenticated attacker to bypass security controls and achieve remote code execution (RCE) on the management server. CVE-2026-22765 (CVSS 8.8): […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Exploit in Dell Wyse Management Suite Allows Full System Compromise Security researcher Aleksandr Zhurnakov from PT Security has identified a critical exploit chain in Dell Wyse Management Suite, affecting both Standard and Pro editions of the On-Premises software. The attack allows unauthenticated users to register devices using an empty group token, leading to complete system compromise. Attackers can exploit hidden logic flaws in Active Directory user import functions, even when these features are disabled. By manipulating the password reset feature, they can gain access to a newly created administrator account and upload a malicious script. This results in full remote code execution on the server. Dell has released a patch in version 5.5 to address these vulnerabilities, tracked under advisory DSA-2026-103. Immediate updates are recommended for all affected systems. 3 sources 73

Extracted Entities

CVEs (1)

CVE-2026-22765