PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite

swarm.ptsecurity.com | research | #rce | #business-logic | #exploit-chain | #dell-wyse | #cve-2026-22765 | #cve-2026-22766
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PT SWARM chained CVE-2026-22765 (privilege escalation) and CVE-2026-22766 (RCE) plus business-logic flaws into unauthenticated remote code execution against Dell Wyse Management Suite On-Prem.
Published
Collected

Related coverage

research · theori.io
What are business logic vulnerabilities, and why are they so hard to catch?
Business logic flaws execute correctly but violate business intent — like a password reset token returned in the HTTP response — and Xint explains why SAST and human testers miss them.
research · portswigger.net
Practical Web Cache Poisoning
James Kettle's whitepaper shows how to turn web caches into exploit delivery systems, hijacking JavaScript and poisoning responses across popular sites, plus defenses and open source tooling.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
Back