CVE-2026-81237
Quick assessment
Affected
Dell Wyse Management Suite
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell Wyse Management Suite 2605.0.3.683 之前的版本存在认证机制不当的漏洞。具有远程访问权限的未经身份验证的攻击者可能利用此漏洞，导致未授权访问。
Possible ATT&CK Techniques 1 AI
T1040 · Network SniffingAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | Wyse Management Suite | < WMS 2605.0.3.683 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81237
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | Wyse Management Suite | 0 ~ WMS 2605.0.3.683 | - |
|
II. Public POCs for CVE-2026-81237
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81237
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-81237 (1)
Same Patch Batch · Dell · 2026-09-15 · 8 CVEs total
| CVE-2026-63695 | 9.8 CRITICAL | Dell SmartFabric OS 10.6.1.3以下版本会话固定漏洞 |
| CVE-2026-63696 | 9.1 CRITICAL | Dell SmartFabric OS10.6.1.3前远程代码执行 |
| CVE-2026-81240 | 8.6 HIGH | Dell Wyse Management Suite 2605.0.3.683以下文件上传致远程代码执行 |
| CVE-2026-81239 | 8.6 HIGH | Wyse Management Suite <2605.0.3.683 未限制文件上传 |
| CVE-2026-81236 | 8.6 HIGH | Dell Wyse Management Suite 2605.0.3.683 前文件上传远程执行 |
| CVE-2026-81235 | 8.0 HIGH | Dell Wyse Management Suite 2605.0.3.683前版本密码学缺陷 |
| CVE-2026-81238 | 7.5 HIGH | Dell Wyse Management Suite 2605.0.3.683前认证缺失 |
IV. Related Vulnerabilities
Same product: Wyse Management Suite
-
CVE-2026-81238
Dell Wyse Management Suite 2605.0.3.683前认证缺失 -
CVE-2026-81235
Dell Wyse Management Suite 2605.0.3.683前版本密码学缺陷 -
CVE-2026-81240
Dell Wyse Management Suite 2605.0.3.683以下文件上传致远程代码执行 -
CVE-2026-81239
Wyse Management Suite <2605.0.3.683 未限制文件上传 -
CVE-2026-81236
Dell Wyse Management Suite 2605.0.3.683 前文件上传远程执行
Same vendor: Dell
-
CVE-2026-81238
Dell Wyse Management Suite 2605.0.3.683前认证缺失 -
CVE-2026-81235
Dell Wyse Management Suite 2605.0.3.683前版本密码学缺陷 -
CVE-2026-81240
Dell Wyse Management Suite 2605.0.3.683以下文件上传致远程代码执行 -
CVE-2026-81239
Wyse Management Suite <2605.0.3.683 未限制文件上传 -
CVE-2026-81236
Dell Wyse Management Suite 2605.0.3.683 前文件上传远程执行
Same weakness: CWE-287
-
CVE-2026-54547
Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Op -
CVE-2026-52827
Kimai: Two-factor authentication bypass on the Kimai API -
CVE-2026-57148
praisonai-platform 0.1.4 still boots on the hardcoded JWT se -
CVE-2026-57134
PraisonAI MCPSecurity Basic/OAuth authentication policies ac -
CVE-2026-47426
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
V. Comments for CVE-2026-81237
No comments yet