TI-2026-32243 Aliases CVE-2026-44271 GHSA-jrhr-xpg4-wphg

SQL injection in Dell Wyse Management Suite

LOW 38CWE-89Published 2026-06-22 · Updated 2026-06-23

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: SQL injection
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00439 38th percentileScored 2026-11-07

Fix Fixed Wyse Management Suite (WMS) (Dell): 2605

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	Wyse Management Suite (WMS)	before 2605	2605	Patch available	CNA

Wyse Management Suite (WMS) VendorDell Affected before 2605 Fixed in 2605 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:wyse_management_suite::::::::	before 2605	Vulnerable	Dell

cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:* Versions before 2605 Vulnerable ·Dell

Remediation

Fix · CNA Wyse Management Suite (WMS) (Dell) Fixed in 2605

Timeline

2026-10-02 Threatist record created from CVE-2026-44271
2026-10-03 Alias added: GHSA-jrhr-xpg4-wphg

References

Advisory 1

https://www.dell.com/support/kbdoc/en-us/000472001/dsa-2026-247

TI-2026-56104 Unrestricted file upload in Dell Wyse Management Suite CVSS 3.1CRITICAL 9.8
TI-2026-56103 Unrestricted file upload in Dell Wyse Management Suite CVSS 3.1CRITICAL 9.8
TI-2026-56100 Unrestricted file upload in Dell Wyse Management Suite CVSS 3.1CRITICAL 9.8
TI-2026-29748 Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of… CVSS 3.1CRITICAL 9.8
TI-2026-56102 Missing authentication in Dell Wyse Management Suite CVSS 3.1CRITICAL 9.1
TI-2021-14699 Deserialization of untrusted data in Dell Wyse Management Suite CVSS 3.1CRITICAL 9.8

See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences