CVE Catalog

CVE-2026-82160

LowCVSS 3.3
Published: Translated: NVD NIST

Summary

Dell Wyse Management Suite versions prior to 2609.0.0.155 contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

Risk Assessment

This may allow an attacker to execute malicious script in a victim's browser, potentially leading to session theft or other attacks. Organizations using vulnerable Dell Wyse Management Suite versions are exposed to XSS attacks.

Recommendation

Update Dell Wyse Management Suite to version 2609.0.0.155 or later. Additionally, restrict local access to trusted users.

Other vulnerabilities in Dell Wyse Management Suite

See all
Original NVD description (English source)

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS