Quick answers
- Is CVE-2026-44274 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-44274 being exploited in the wild.
- How severe is CVE-2026-44274?
- High severity, with a CVSS score of 7.8, published 22 June 2026.
- Which products and versions are affected?
- Dell Wyse Management Suite prior to 2605; Dell Wyse Management Suite Repository prior to 2605.
- Is there a fix for CVE-2026-44274?
- A patch was published on 2026-06-01: Remediated versions released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-44274 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2026-44274?
- Check whether you run Dell Wyse Management Suite or Dell Wyse Management Suite Repository at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
Dell Wyse Management Suite (WMS) and WMS Repository versions prior to 2605 are vulnerable to an Improper Link Resolution Before File Access (CWE-59) flaw. The vulnerability occurs when the application fails to properly validate file links (such as symbolic links) before performing file operations. A low-privileged attacker with local access to the host operating system can exploit this by creating malicious links that point to sensitive files, potentially leading to unauthorized read, write, or delete operations with the privileges of the WMS service. This can result in a full compromise of confidentiality, integrity, and availability (CVSS 7.8). The issue is resolved in version 2605.
Affected products
- Dell Wyse Management Suite (WMS) prior to 2605
- Dell Wyse Management Suite Repository prior to 2605
Timeline
- 2026-06-01: patched: Remediated versions released
- 2026-06-16: advisory: Initial release of DSA-2026-247
- 2026-06-22: disclosed: NVD publication date