{"id":"CVE-2026-82158","kind":"vulnerability","aliases":["CVE-2026-82158"],"related":[],"title":"Dell Wyse Management Suite: cross-site scripting lets a low-privilege user inject scripts","description":"Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.","summary":"Dell Wyse Management Suite versions before 2609.0.0.155 do not neutralize input in generated web pages, a cross-site scripting flaw. A remote attacker with low privileges can inject script that runs in the browser of another user of the console.","severity":"critical","cvss":9.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-wyse-management-suite","enterprise","thin-clients","vendor"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the installed Dell Wyse Management Suite version in the admin console; versions below `2609.0.0.155` are listed as affected.","fix":"- Dell Wyse Management Suite: move to `2609.0.0.155` or later.","status":"open","published_at":"2026-11-03T21:17:43+00:00","first_seen_at":"2026-11-03T21:19:31+00:00","triaged_at":"2026-11-03T21:20:32+00:00","updated_at":"2026-11-03T21:20:32+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-03T21:20:32Z","model":"claude-haiku-5-5","output":{"fix":"- Dell Wyse Management Suite: move to `2609.0.0.155` or later.","reach":"network","title":"Dell Wyse Management Suite: cross-site scripting lets a low-privilege user inject scripts","impact":"medium","summary":"Dell Wyse Management Suite versions before 2609.0.0.155 do not neutralize input in generated web pages, a cross-site scripting flaw. A remote attacker with low privileges can inject script that runs in the browser of another user of the console.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell-wyse-management-suite","thin-clients","enterprise"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Script runs in an admin's browser, enabling session or data theft","analyst_note":"Confirm whether the console is reachable remotely in default setups and whether Dell's advisory lists additional fixes or mitigations; source only NVD.","how_to_check":"- Check the installed Dell Wyse Management Suite version in the admin console; versions below `2609.0.0.155` are listed as affected.\n- unknown for other checks; the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Organizations that run Dell Wyse Management Suite to manage thin clients and reach its web console remotely. Sources do not describe which console pages or configurations are exposed beyond the affected version range.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00069,"input_tokens":4136,"output_tokens":552,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-2026':18A,21A '-82158':19A,22A '2609.0.0.155':39B,81C 'access':103C 'anoth':69B 'attack':56B,100C 'browser':67B 'client':31B 'consol':73B 'contain':82C 'could':104C 'cross':6A,50B,93C 'cross-sit':5A,49B,92C 'cve':17A,20A 'dell':1A,24B,33B,74C 'dell-wyse-management-suit':23B 'enterpris':28B 'exploit':106C 'flaw':53B 'generat':45B,91C 'improp':84C 'inject':15A,61B,112C 'input':43B,87C 'lead':109C 'let':9A 'low':12A,58B,98C 'low-privileg':11A 'manag':3A,26B,35B,76C 'neutral':42B,85C 'page':47B,90C 'potenti':105C 'prior':79C 'privileg':13A,59B,99C 'remot':55B,102C 'run':64B 'script':8A,16A,52B,62B,95C,111C 'site':7A,51B,94C 'suit':4A,27B,36B,77C 'thin':30B 'thin-client':29B 'user':14A,70B 'vendor':32B 'version':37B,78C 'vulner':96C,108C 'web':46B,89C 'wyse':2A,25B,34B,75C","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Dell Wyse Management Suite to manage thin clients and reach its web console remotely. Sources do not describe which console pages or configurations are exposed beyond the affected version range.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["critical","dellwysemanagementsuite","enterprise","thinclients","vendor"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:43+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82158","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82158","severity":null,"published_at":"2026-11-03T21:17:43+00:00","modified_at":"2026-11-03T21:17:43+00:00","first_seen_at":"2026-11-03T21:19:31+00:00","fetched_at":"2026-11-03T21:19:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}