CVE-2026-41120

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

Scoring

Severity

CRITICAL

CVSS base score

9.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.39%

CWE

CWE-349

Published

2026-06-25

Last modified

2026-06-26

Affected products

• Dell Wyse Management Suite

Weakness type

• CWE-349

Related vulnerabilities

• CVE-2026-15387 — Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
• CVE-2026-54625 — django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
• CVE-2026-50252 — Possible cache poisoning attack by mapping source port population per thread
• CVE-2026-46342 — Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
• CVE-2026-45602 — Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
• CVE-2026-42960 — Possible cache poisoning via promiscuous records for the authority section
• CVE-2026-44572 — Next.js: Middleware / Proxy redirects can be cache-poisoned
• CVE-2026-32162 — Windows COM Elevation of Privilege Vulnerability

Markdown version · Browse all CVEs