CVE-2026-411209.8CriticalCWE-349

CVE-2026-41120: Dell Wyse Management Suite vulnerability

Dell · Wyse Management Suite

Vendor fix available · Affected: Dell Wyse Management Suite · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.4%probability of exploitation in the next 30 days

33rd percentile

050100

Higher than 33% of scored CVEs

9.8CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Acceptance of Extraneous Untrusted Data With Trusted Data · Cryptography
Vendor: Dell
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 29 Jun.

29 Jun 03:01
Critical Dell Wyse bug (CVE-2026-41120) lets attackers run code
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.