Critical vulnerability in Dell Wyse, remote code execution for remote…

Description

Dell gives little information about these vulnerabilities and some of the information provided is seemingly contradictive. CVE-2026-41120 is a vulnerability concerning acceptance of untrusted data where a low-privileged attacker can remotely execute code. The CVSS vector string shows no privileges being required. In the case of a software like this, low privileges might mean a lot of devices. CVE-2026-49506 is a path traversal vulnerability that allows a high privileged attacker to achieve remote code execution.