CVE-2026-81235: Dell Wyse Management Suite missing cryptographic step information tampering

CVE-2026-81235 · Severity: high · CVSS 8 · Published 2026-09-15

Dell Wyse Management Suite is a centralized management platform used by organizations to administer and monitor thin client and endpoint devices. CVE-2026-81235 is a missing cryptographic step vulnerability that allows a high-privileged attacker with remote access to tamper with system information, potentially compromising the integrity of managed devices and configurations.

Technologies: Dell Wyse Management Suite. Vendors: Dell.

Quick answers

Is CVE-2026-81235 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-81235 being exploited in the wild.
How severe is CVE-2026-81235?
High severity, with a CVSS score of 8, published 15 September 2026.
Which products and versions are affected?
Dell Wyse Management Suite prior to 2605.0.3.683.
Is there a fix for CVE-2026-81235?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-81235 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-81235?
Check whether you run Dell Wyse Management Suite at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a missing cryptographic step weakness in Dell Wyse Management Suite versions prior to 2605.0.3.683. An attacker with high-level administrative privileges and network access can exploit this flaw to bypass cryptographic protections, leading to unauthorized modification of sensitive data. The vulnerability requires high privileges and has a complex attack complexity (AC:H), limiting its exploitation to insider threats or compromised administrator accounts. Successful exploitation enables information tampering with confidentiality, integrity, and availability impact across connected systems.

Affected products

  • Dell Wyse Management Suite prior to 2605.0.3.683

Timeline

  • 2026-09-15: disclosed
  • 2026-09-15: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.