CVE-2026-66272 describes a missing authentication vulnerability in Dell Wyse Management Suite (WMS) versions before 2605.0.2. An unauthenticated attacker with remote network access could exploit this flaw to gain unauthorized access to sensitive information. The vulnerability is categorized under CWE-200, indicating exposure of sensitive data to unauthorized actors. The CVSS v3.1 base score is 5.3, reflecting a medium impact primarily on confidentiality. No integrity or availability impacts are reported. The vendor has not yet provided a remediation level or patch information, and no exploits have been observed in the wild.

The vulnerability allows an unauthenticated remote attacker to disclose sensitive information from the affected Dell Wyse Management Suite. This could lead to unauthorized access to confidential data. There is no reported impact on system integrity or availability. The medium severity rating and CVSS score of 5.3 reflect the confidentiality impact only.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the Dell Wyse Management Suite and monitor for unusual access attempts. Follow vendor updates closely for any forthcoming patches or mitigations.