CVE-2026-82161: XSS
Published Nov 3, 2026
·Updated
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Event History
Nov 3, 2026
CVE Published
via MITRE·08:54 PM
Data Sourced
via MITRE·08:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell Wyse Management Suite versions earlier than 2609.0.0.155 are affected.
2
What access and interaction does exploitation require?
An attacker needs remote access and low-privileged access to the product. Exploitation also requires user interaction.
3
What could a successful exploit allow?
Successful exploitation could lead to script injection. The assigned vector indicates potential high confidentiality impact and low integrity and availability impact.