CVE-2026-82158: XSS
Published Nov 3, 2026
·Updated
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Event History
Nov 3, 2026
CVE Published
via MITRE·08:52 PM
Data Sourced
via MITRE·08:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell Wyse Management Suite versions earlier than 2609.0.0.155 are affected.
2
What access does an attacker need to exploit this issue?
An attacker needs remote access and low-privileged access to the product. Exploitation also requires user interaction.
3
What could exploitation allow?
Successful exploitation could lead to script injection. The supplied severity vector indicates potential high impacts to confidentiality, integrity, and availability, with impact extending beyond the vulnerable security authority.