CVE-2026-82159: XSS
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Wyse Management Suiteto a version that resolves this vulnerability.Fixed in 2609.0.0.155
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Wyse Management Suite versions earlier than 2609.0.0.155 are affected. The supplied information does not identify any additional configuration requirements.
What access does an attacker need to exploit this issue?
An attacker needs remote access and low-privileged access to the affected system. No user interaction is required according to the provided CVSS vector.
What is the potential impact of successful exploitation?
Successful exploitation could allow script injection. The CVSS vector indicates potential high impact to confidentiality, integrity, and availability.