Dell Wyse Management Suite script injection flaws

Summary

Four script injection (XSS) flaws affect Dell Wyse Management Suite versions before 2609.0.0.155. A low-privileged attacker with remote or local access can inject scripts.

Affected when

• attacker has a low-privilege account
• remote access (local access for CVE-2026-82160)

What to do

Update to version 2609.0.0.155 or later.

Products and platforms

• Wyse Management Suite

CVE IDs

• CVE-2026-82159 (opens in a new tab)
• CVE-2026-82158 (opens in a new tab)
• CVE-2026-82161 (opens in a new tab)
• CVE-2026-82160 (opens in a new tab)

Sources

• Advisory: dell.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)

Times

First published 2026-11-03 20:50 UTC

First seen 2026-11-09 15:20 UTC