← Back

CVE-2026-41120

nvd nist
Published: Jun 25, 2026Modified: Jun 26, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security_alert@emc.com (Secondary)

Description

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

Affected (2)

Dell
1 product
Wyse Management Suite
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Wyse Management Suite
Before 5.5
Wyse Management Suite
Version 5.5

Related CWEs

CWE-349
Acceptance of Extraneous Untrusted Data With Trusted Data
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.