CVE-2026-81237: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability
CVE-2026-81237 is a medium-severity flaw (CVSS 6.5) affecting wyse management suite. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 73%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2026-09-15 |
| Last modified | 2026-09-21 |
Last updated 2026-09-21 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-81237?
wyse management suite: upgrade to 2605.0.3.683. Exact commands for each OS are on this page.
Is CVE-2026-81237 being exploited?
CVE-2026-81237 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-81237 affect?
CVE-2026-81237 affects wyse management suite. Severity is medium (CVSS 6.5). Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
How urgent is CVE-2026-81237?
Priority 35/100. Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2026-41120 CRITICAL 9.8 UPGRADE Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data
- CVE-2026-44272 HIGH 8.8 UPGRADE Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special El
- CVE-2026-49506 HIGH 7.2 UPGRADE Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a R
- CVE-2026-44271 HIGH 8.1 UPGRADE Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special El
- CVE-2026-44274 HIGH 7.8 UPGRADE Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File