PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-44272 Dell CVE debrief

CVE-2026-44272 is a high-severity SQL injection vulnerability in Dell Wyse Management Suite (WMS) versions prior to WMS 2605. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. The vulnerability has a CVSS score of 8.8 and is considered HIGH severity. Dell has provided a vendor advisory for mitigation. The CVE was published on June 22, 2026, and last modified on June 26, 2026.

Vendor
Dell
Product
Wyse Management Suite
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-22
Original CVE updated
2026-06-26
Advisory published
2026-06-22
Advisory updated
2026-06-26

Who should care

Organizations using Dell Wyse Management Suite (WMS) versions prior to WMS 2605 should prioritize patching this vulnerability. Low-privileged attackers with remote access could exploit this vulnerability, leading to unauthorized access. Security teams and system administrators responsible for WMS installations should take immediate action.

Technical summary

The CVE-2026-44272 vulnerability is an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dell Wyse Management Suite (WMS). The vulnerability has a CVSS score of 8.8 and is considered HIGH severity. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The weakness is classified as CWE-89. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Defensive priority

High priority should be given to patching CVE-2026-44272 in Dell Wyse Management Suite (WMS) versions prior to WMS 2605. This vulnerability has a high CVSS score and could lead to unauthorized access if exploited.

Recommended defensive actions

  • Patch Dell Wyse Management Suite (WMS) to version 2605 or later
  • Restrict remote access to WMS for low-privileged users
  • Monitor WMS logs for suspicious SQL activity
  • Implement additional security controls to detect and prevent SQL injection attacks
  • Review and update WMS configurations to ensure secure settings

Evidence notes

The CVE-2026-44272 vulnerability was published on June 22, 2026, and last modified on June 26, 2026. The vulnerability has a CVSS score of 8.8 and is considered HIGH severity. Dell has provided a vendor advisory for mitigation. The CWE is classified as CWE-89.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-44272 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-44272

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-44272 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-44272

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.