CVE-2025-36576: Dell Wyse Management Suite · Cross-Site Request Forgery (CSRF)
Affects Dell Wyse Management SuiteSource CVE Database V5
Not known to be exploited · CVSS 2.7 Low : upgrade to 5.2 when convenient.
Data as of 26 Oct 2026, 08:30 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 5.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:LExploitation evidence
Disclosed: evidence found.
CVE published 10 Jun 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Dell Wyse Management Suite to 5.2.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Dell Wyse Management Suite | Affected
| Fixed in
|
AI-suggested
Given the absence of a direct patch link, European organizations should take immediate steps to mitigate risk. First, restrict remote access to the Dell Wyse Management Suite console by implementing network segmentation and firewall rules to limit access only to trusted administrative hosts. Employ strong authentication mechanisms and ensure that only necessary users have high privilege access to the management interface. Monitor and audit administrative actions on the management console to detect any unusual activity that could indicate exploitation attempts. If possible, upgrade to Dell Wyse Management Suite version 5.2 or later once available, as this version is indicated to have addressed the vulnerability. Additionally, implement web application security best practices such as enforcing anti-CSRF tokens and validating HTTP headers to reduce the risk of CSRF attacks. Regularly review and update endpoint management policies to minimize the attack surface. Finally, maintain up-to-date intrusion detection and prevention systems to identify SSRF patterns and anomalous network traffic originating from the management server.
Description
Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.