CVE-2026-63701
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could exploit this, leading to privilege escalation.
Risk Assessment
The risk includes the possibility of privilege escalation by an attacker with local access, potentially leading to full system compromise.
Recommendation
It is recommended to update Dell Wyse Management Suite to version 2605.0.2 or later and restrict local access to the system.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.