Product:
Wyse Management Suite
Summary
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This poses significant risks to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-22766 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and remote access can upload malicious files to the system. Once the files are executed, the attacker can gain control over the affected system, leading to unauthorized actions and potential data breaches.
Affected Products
- Wyse Management Suite: Affected versions prior to WMS 5.5 are vulnerable to file upload attacks.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to Wyse Management Suite version 5.5 or later. Additionally, implementing strict file upload controls and monitoring for unauthorized access can help reduce the risk of exploitation.