CVE-2026-82160: XSS
Published Nov 3, 2026
·Updated
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Wyse Management Suiteto a version that resolves this vulnerability.Fixed in 2609.0.0.155
Event History
Nov 3, 2026
CVE Published
via MITRE·08:56 PM
Data Sourced
via MITRE·08:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
Exploitation requires a low-privileged attacker with local access. The reported impact is script injection.
2
Which versions are affected?
Dell Wyse Management Suite versions earlier than 2609.0.0.155 are affected. Updating to version 2609.0.0.155 or later addresses the affected version range.