Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite

swarm.ptsecurity.com | research | #rce | #business-logic | #exploit-chain | #dell-wyse | #cve-2026-22765 | #cve-2026-22766

Summary

PT SWARM chained CVE-2026-22765 (privilege escalation) and CVE-2026-22766 (RCE) plus business-logic flaws into unauthenticated remote code execution against Dell Wyse Management Suite On-Prem.
Published
Collected

original ↗

Related coverage

  1. What are business logic vulnerabilities, and why are they so hard to catch? (theori.io)
  2. Practical Web Cache Poisoning (portswigger.net)
  3. Hackian and the Ghosts in Your Business Logic (ethiack.com)
  4. ToolShell - A Critical SharePoint Vulnerability Chain under Active Exploitation (blog.viettelcybersecurity.com)
  5. MyBB <= 1.8.31: Remote Code Execution Chain (swarm.ptsecurity.com)
  6. Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM (theori.io)

back