Dell TechnologiesCVE-2026-81236

Dell Technologies Wyse Management Suite: arbitrary file upload

CVE-2026-81236 · Published Sep 15, 2026 · updated Sep 21, 2026

High8.6

Fix: upgrade to WMS 2605.0.3.683 or later

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected versions

Package	Affected	Fixed in
Wyse Management Suite Product	< WMS 2605.0.3.683	WMS 2605.0.3.683

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-434

More Dell Technologies advisories

All Dell Technologies

High 8.0Sep 15

Dell Technologies Wyse Management Suite: tamperingCVE-2026-81235fixed in WMS 2605.0.3.683 Medium 6.5Sep 15

Dell Technologies Wyse Management Suite: improper authenticationCVE-2026-81237fixed in WMS 2605.0.3.683 High 7.5Sep 15

Dell Technologies Wyse Management Suite: missing authenticationCVE-2026-81238fixed in WMS 2605.0.3.683 High 8.6Sep 15

Dell Technologies Wyse Management Suite: arbitrary file uploadCVE-2026-81239fixed in WMS 2605.0.3.683 High 8.6Sep 15

Dell Technologies Wyse Management Suite: arbitrary file uploadCVE-2026-81240fixed in WMS 2605.0.3.683 Critical 9.8Sep 15

Dell Technologies SmartFabric OS10 Software: session fixationCVE-2026-63695fixed in 10.6.1.3