CVE-2026-41120

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 5.5 HF1

Description An issue exists where the system accepts extraneous untrusted data mixed with trusted data. This occurs due to improper input validation, allowing attacker-controlled data to be processed as trusted server-side information. A low privileged attacker with remote access can exploit this by sending crafted requests to smuggle untrusted data into a trusted execution path, resulting in remote code execution on the server. This could lead to a full compromise of the management plane and control over managed endpoints.

Recommendations Upgrade to WMS 5.5 HF1.