Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution

Gbhackers

Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution

First seen 29 Jun 2026, 19:04 UTC • •72.9

Article Content

1 / 7

Browse articles

ThreatCluster •June 30, 2026 at 18:43 UTC

•CVE-2026-41120 allows low-privileged attackers to execute remote code with a CVSS score of 9.8.
•CVE-2026-49506 is a path traversal vulnerability requiring high privileges for exploitation.
•Dell has released a patch for WMS, urging immediate upgrades to mitigate risks.

Dell Technologies has disclosed critical vulnerabilities in its Wyse Management Suite (WMS) that allow remote attackers to execute arbitrary code. The vulnerabilities, identified as CVE-2026-41120 and CVE-2026-49506, affect WMS versions prior to 5.5 HF1. CVE-2026-41120, with a CVSS score of 9.8, enables low-privileged attackers to exploit the flaw without user interaction. CVE-2026-49506 is a path traversal vulnerability requiring high privileges for exploitation. Organizations using WMS are at risk of significant impacts on confidentiality, integrity, and availability. Dell has released a patch for these vulnerabilities, urging immediate upgrades. Security teams are advised to enhance monitoring and review access controls to mitigate risks. The vulnerabilities were disclosed by security researcher Tien Phan.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 92d ago How this analysis works

Timeline

2026-03-20

CVE-2026-33017 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-05-08

Patch released for WMS

Dell released version 5.5 HF1 to address the critical vulnerabilities in WMS.

2026-06-25

CVE-2026-41120 published

A critical vulnerability allowing low-privileged remote code execution was disclosed.

2026-06-25

CVE-2026-49506 published

A path traversal vulnerability was disclosed, enabling high-privileged remote code execution.

More articles in this cluster (6)

Threat Graph

20 entities, 53 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (6)

Malware
Remote Code Execution
Supply Chain Attack
Zero-day Exploit
T1021 - Remote Services
T1203 - Exploitation for Client Execution

Organization (3)

Dell
Dell Technologies
Dell Wyse

Vulnerability (5)

CVE-2026-33017
CVE-2026-41120
CVE-2026-49506
CVE-2026-50160
Path Traversal

Weakness (1)

CWE-22 - Path Traversal

Malware (1)

Stockstay

Affected Platform (4)

Dell Wyse Management Suite
Hoppscotch
Windows
Wyse Management Suite

Relationships

Stockstay exploits CVE-2026-33017
Stockstay exploits CVE-2026-41120
Stockstay exploits CVE-2026-49506
Stockstay exploits CVE-2026-50160
Stockstay exploits Path Traversal
CVE-2026-33017 targets Dell Wyse Management Suite
CVE-2026-33017 targets Hoppscotch
CVE-2026-33017 targets Windows
CVE-2026-33017 targets Wyse Management Suite
CVE-2026-41120 targets Dell Wyse Management Suite
CVE-2026-41120 targets Hoppscotch
CVE-2026-41120 targets Windows
CVE-2026-41120 targets Wyse Management Suite
CVE-2026-49506 targets Dell Wyse Management Suite
CVE-2026-49506 targets Hoppscotch
CVE-2026-49506 targets Windows
CVE-2026-49506 targets Wyse Management Suite
CVE-2026-50160 targets Dell Wyse Management Suite
CVE-2026-50160 targets Hoppscotch
CVE-2026-50160 targets Windows
CVE-2026-50160 targets Wyse Management Suite
Path Traversal targets Dell Wyse Management Suite
Path Traversal targets Hoppscotch
Path Traversal targets Windows
Path Traversal targets Wyse Management Suite
Stockstay targets Dell
Stockstay targets Dell Technologies
Stockstay targets Dell Wyse
Malware targets Dell Wyse Management Suite
Malware targets Hoppscotch
Malware targets Windows
Malware targets Wyse Management Suite
Remote Code Execution targets Dell Wyse Management Suite
Remote Code Execution targets Hoppscotch
Remote Code Execution targets Windows
Remote Code Execution targets Wyse Management Suite
Supply Chain Attack targets Dell Wyse Management Suite
Supply Chain Attack targets Hoppscotch
Supply Chain Attack targets Windows
Supply Chain Attack targets Wyse Management Suite
Zero-day Exploit targets Dell Wyse Management Suite
Zero-day Exploit targets Hoppscotch
Zero-day Exploit targets Windows
Zero-day Exploit targets Wyse Management Suite
T1021 - Remote Services targets Dell Wyse Management Suite
T1021 - Remote Services targets Hoppscotch
T1021 - Remote Services targets Windows
T1021 - Remote Services targets Wyse Management Suite
T1203 - Exploitation for Client Execution targets Dell Wyse Management Suite
T1203 - Exploitation for Client Execution targets Hoppscotch
T1203 - Exploitation for Client Execution targets Windows
T1203 - Exploitation for Client Execution targets Wyse Management Suite
Stockstay related to CWE-22 - Path Traversal

Following this threat?

Track Stockstay, Dell and CVE-2026-33017 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical CVE-2026-0768 Exploited in Langflow Attacks Hackers are actively exploiting a critical vulnerability in Langflow, tracked as CVE-2026-0768, which allows unauthenticated remote code execution. The flaw affects all versions up to 1.4.2 of the AI-focused low-code platform Langflow, enabling attackers to execute arbitrary Python code with root privileges. Security…

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…