CVE-2026-41120 describes a critical vulnerability in Dell Wyse Management Suite prior to version 5.5 HF1, involving acceptance of extraneous untrusted data with trusted data (CWE-349). This weakness can be exploited remotely by an attacker with low privileges to achieve remote code execution. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. The vendor has not yet provided an official remediation level or patch information. The product is not a cloud service, so remediation depends on vendor patch releases.

Successful exploitation could lead to remote code execution by an attacker with low privileges and remote access, compromising system confidentiality, integrity, and availability. This poses a critical risk to affected systems running vulnerable versions of Dell Wyse Management Suite.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the management suite and monitor for suspicious activity related to this vulnerability. Follow Dell's future advisories for updates on patches or mitigations.