Product:
Wyse Management Suite
Summary
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges. This could allow unauthorized access to sensitive functions within the management suite.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-22765 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can send specially crafted requests to the affected system. By bypassing authorization checks, the attacker may gain elevated privileges, allowing them to perform unauthorized actions within the Wyse Management Suite.
Affected Products
- Wyse Management Suite: A management platform for Wyse thin clients, vulnerable in versions prior to WMS 5.5.
Mitigation
To mitigate this vulnerability, users should upgrade to Wyse Management Suite version 5.5 or later. Additionally, implementing strict access controls and monitoring for unusual activity can help reduce the risk of exploitation.