Live › vulnerability › CVE-2026-82161
Dell Wyse Management Suite versions before 2609.0.0.155 have a cross-site scripting flaw in their web interface. A low-privileged attacker with remote access can inject script that runs in other users' browsers.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Organisations running Dell Wyse Management Suite before 2609.0.0.155 are exposed, and the flaw needs remote access with a low-privilege account. The sources do not say which deployment modes or configurations are affected.
No product ranges from the sources yet.
2609.0.0.155; anything lower is in the affected range.2609.0.0.155 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
This page as .md · .json · in your agent: get_signal("CVE-2026-82161")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.