Live › vulnerability › CVE-2026-82158
Dell Wyse Management Suite versions before 2609.0.0.155 do not neutralize input in generated web pages, a cross-site scripting flaw. A remote attacker with low privileges can inject script that runs in the browser of another user of the console.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Organizations that run Dell Wyse Management Suite to manage thin clients and reach its web console remotely. Sources do not describe which console pages or configurations are exposed beyond the affected version range.
No product ranges from the sources yet.
2609.0.0.155 are listed as affected.2609.0.0.155 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
This page as .md · .json · in your agent: get_signal("CVE-2026-82158")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.