CVE Catalog

CVE-2026-82161

MediumCVSS 6.8
Published: Translated: NVD NIST

Summary

Dell Wyse Management Suite versions prior to 2609.0.0.155 contain a Cross-site Scripting vulnerability due to improper neutralization of input during web page generation. A low-privileged attacker with remote access could exploit this vulnerability to inject scripts.

Risk Assessment

A low-privileged remote attacker could inject malicious script, potentially leading to session hijacking or unauthorized actions in the victim's browser context.

Recommendation

Update Dell Wyse Management Suite to version 2609.0.0.155 or later. Until patched, restrict access to the management interface and validate user input.

Other vulnerabilities in Dell Wyse Management Suite

See all
Original NVD description (English source)

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS