Live › vulnerability › CVE-2026-82159
Dell Wyse Management Suite versions before 2609.0.0.155 fail to neutralize input in generated web pages, a cross-site scripting flaw. A low-privileged attacker with remote access can inject script that runs in another user's browser session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Organizations running Dell Wyse Management Suite before 2609.0.0.155 with a remote-accessible web console. Low-privileged accounts are enough to exploit it, so anyone with a login to the console is in scope. Installations already on 2609.0.0.155 or later are not affected.
No product ranges from the sources yet.
2609.0.0.1552609.0.0.155 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
This page as .md · .json · in your agent: get_signal("CVE-2026-82159")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.