Is CVE-2026-82158 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82158 being exploited in the wild.

How severe is CVE-2026-82158?

Critical severity, with a CVSS score of 9, published 3 November 2026.

Which products and versions are affected?

Dell Wyse Management Suite prior to 2609.0.0.155.

Is there a fix for CVE-2026-82158?

Yes: fixed in 2609.0.0.155 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-82158 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-82158?

Check whether you run Dell Wyse Management Suite at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82158: Dell Wyse Management Suite cross-site scripting

CVE-2026-82158 · Severity: critical · CVSS 9 · Published 2026-11-03

Dell Wyse Management Suite is a centralized management tool for Wyse thin client devices used in corporate environments. Multiple cross-site scripting (XSS) vulnerabilities allow a low-privileged attacker with network access to inject malicious scripts that can steal administrator credentials, compromise other users' sessions, or take control of managed devices. An attacker could execute arbitrary commands across the entire managed thin client fleet.

Technologies: Dell Wyse Management Suite. Vendors: Dell.

Quick answers

Is CVE-2026-82158 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82158 being exploited in the wild.
How severe is CVE-2026-82158?: Critical severity, with a CVSS score of 9, published 3 November 2026.
Which products and versions are affected?: Dell Wyse Management Suite prior to 2609.0.0.155.
Is there a fix for CVE-2026-82158?: Yes: fixed in 2609.0.0.155 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-82158 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-82158?: Check whether you run Dell Wyse Management Suite at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2609.0.0.155 or later

Technical details

Four separate Improper Neutralization of Input During Web Page Generation (cross-site scripting) vulnerabilities exist in the web interface of Dell Wyse Management Suite versions prior to 2609.0.0.155. A low-privileged authenticated attacker with network access can inject malicious scripts through unvalidated input parameters; depending on the specific vulnerability, exploitation may or may not require user interaction (UI:R vs UI:N). The most severe variant (CVE-2026-82158, CVSS 9.0) allows scope change with high impact on confidentiality, integrity, and availability.

Affected products

Dell Wyse Management Suite prior to 2609.0.0.155

Timeline

2026-11-03: disclosed
2026-10-08: advisory: Dell DSA-2026-405 initial release
2026-09-28: patched: Version 2609.0.0.155 released

References

https://www.dell.com/support/kbdoc/en-us/000506515/dsa-2026-405-security-update-for-dell-wyse-management-suite-wms-for-multiple-vulnerabilities

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.