CVE-2026-41120

Analyzed Analyzed - Analysis Complete

Remote Code Execution in Dell Wyse Management Suite

Publication date: 2026-06-25

Last updated on: 2026-06-26

Assigner: Dell

Description

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-25

Last Modified

2026-06-26

Generated

2026-07-16

AI Q&A

2026-06-25

EPSS Evaluated

2026-07-14

NVD

CVE-2026-41120

EUVD

EUVD-2026-39395

Affected Vendors & Products

Vendor	Product	Version / Range
dell	wyse_management_suite	to 5.5 (exc)
dell	wyse_management_suite	5.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-349	The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

Attack-Flow Graph

Executive Summary

Dell Wyse Management Suite versions prior to WMS 5.5 HF1 have a vulnerability known as Acceptance of Extraneous Untrusted Data With Trusted Data. This means that the software improperly accepts untrusted data alongside trusted data.

A low privileged attacker with remote access could exploit this flaw to execute code remotely on the affected system.

Impact Analysis

This vulnerability can have a severe impact as it allows a remote attacker with low privileges to execute arbitrary code on the affected system.

Successful exploitation could lead to full compromise of confidentiality, integrity, and availability of the system.

Hi! I’m here to help you understand CVE-2026-41120. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70