CVE-2026-81236

Analyzed Analyzed - Analysis Complete

Dell Wyse Management Suite Unrestricted File Upload RCE

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Dell

Description

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-05

NVD

CVE-2026-81236

EUVD

EUVD-2026-78906

Affected Vendors & Products

Vendor	Product	Version / Range
dell	wyse_management_suite	to 2605.0.3.683 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

Dell Wyse Management Suite before version 2605.0.3.683 has an Unrestricted Upload of File with Dangerous Type vulnerability. An attacker without authentication and with remote access could exploit this to upload malicious files, potentially leading to remote code execution on the affected system.

Detection Guidance

Detecting this vulnerability requires checking the version of Dell Wyse Management Suite installed on your system. Compare the installed version against 2605.0.3.683. If the version is older, the system is vulnerable. Use commands like 'wmic product get name,version' on Windows or 'dpkg -l | grep wyse' on Linux to check installed versions.

Impact Analysis

This vulnerability allows an attacker to execute arbitrary code remotely on systems running vulnerable Dell Wyse Management Suite software. This could lead to unauthorized access, data theft, or disruption of services if exploited.

Compliance Impact

This vulnerability could lead to unauthorized remote execution, potentially exposing sensitive data. This may violate compliance requirements under GDPR (data protection) and HIPAA (health information security) by enabling unauthorized access to personal or protected health information.

Mitigation Strategies

Update Dell Wyse Management Suite to version 2605.0.3.683 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-81236. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70