Dell Wyse Management Vulnerabilities Enables Complete System Compromise

A security analysis shows that two logic flaws in Dell Wyse Management Suite On‑Premises (CVE-2026-22765 and CVE-2026-22766) can be chained to allow unauthenticated attackers to escalate to administrator and deploy a JSP web shell for remote code execution by abusing device registration, exposed AD import APIs, password-reset/LDAP weaknesses, and file repository path reconfiguration; Dell released WMS 5.5 on 2026-02-23 to address these issues.