CVE-2026-82158

CRITICAL 9.0CVE-2026-82158 · Published 03/11/2026 · updated 03/11/2026

In short

CVE-2026-82158 is a CRITICAL (CVSS 9.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

References

dell.com/support/kbdoc/en-us/000506515/dsa-2026-405-security-update-for-dell-wyse-management-suite-wms-for-multiple-vulnerabilities

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free