01 Record

CVE-2026-66272

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially

MediumPUBLISHEDCNA: dell

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

View raw JSON CVE Program record

02 Description

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially

03 Metadata

Published: 2026-08-14 15:34Z3 HR AGO
Last updated: 2026-08-14 15:58Z2 HR AGO
Reserved: 2026-07-24
Assigning CNA: dell
Record state: PUBLISHED
Severity: Medium (CVSS 5.3)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses: CWE-200
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: 8fb74b20c63fb946c3f55a1a09bf2ff6ca174afd7e72c5e8a4c3246df4ec0be0

04 Affected products

VendorProductVersionsPlatforms

DellWyse Management Suite (WMS)0 to < 2605.0.2—

05 References

www.dell.comhttps://www.dell.com/support/kbdoc/en-us/000493271/dsa-2026-329-security-update-for-dell-wyse-management-suite-wms-for-multiple-vulnerabilitiesvendor-advisory