CVE-2026-66272
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to information disclosure.
Risk Assessment
The risk includes the possibility of remote disclosure of sensitive information without authentication, potentially compromising organizational data confidentiality.
Recommendation
It is recommended to update Dell Wyse Management Suite to version 2605.0.2 or later and restrict remote access to critical functions.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.