AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-66271

Dell Technologies Wyse Management Suite (WMS): arbitrary file upload

Dell Technologies

CVE-2026-66271 · Published Aug 14, 2026 · updated Aug 18, 2026

High7.2
Fix: upgrade to 2605.0.2 or later
Dell Technologies advisory

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

Affected versions

PackageAffectedFixed in
Wyse Management Suite (WMS)
Product
< 2605.0.22605.0.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-434

More Dell Technologies advisories

All Dell Technologies
Medium 5.3Aug 14Dell Technologies Wyse Management Suite (WMS): missing authenticationCVE-2026-66272fixed in 2605.0.2High 7.8Aug 14Dell Technologies Wyse Management Suite (WMS): insecure permissionsCVE-2026-63700fixed in 2605.0.2Medium 6.3Aug 14Dell Technologies Wyse Management Suite (WMS): unsafe deserializationCVE-2026-63701fixed in 2605.0.2Medium 6.3Aug 14Dell Technologies Wyse Management Suite (WMS): hard-coded credentialsCVE-2026-63702fixed in 2605.0.2High 7.2Aug 14Dell Technologies Wyse Management Suite (WMS): arbitrary file uploadCVE-2026-66270fixed in 2605.0.2High 7.8Aug 12Dell Technologies Display and Peripheral Manager: authentication bypassCVE-2026-59914fixed in 2.3.0.17