Use of Hard-coded Credentials in Dell Wyse Management Suite
CVE-2026-63702

6.3MEDIUM

Key Information:

Vendor

Dell
Status
Wyse Management Suite (wms)
Vendor
CVE Published:
14 August 2026

What is CVE-2026-63702?

The Dell Wyse Management Suite (WMS) prior to version 2605.0.2 contains a critical security flaw involving hard-coded credentials. This vulnerability allows a low privileged attacker with local access to gain unauthorized access to the system. Exploiting this weakness could lead to significant security risks, highlighting the need for users to upgrade to the latest version to mitigate potential attacks and secure sensitive information.

Affected Version(s)

Wyse Management Suite (WMS) 0 < 2605.0.2

References

https://www.dell.com/support/kbdoc/en-us/000493271/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.