Cross-site Scripting Vulnerability in Dell Wyse Management Suite
CVE-2026-23858

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Wyse Management Suite
Vendor
CVE Published:
24 February 2026

What is CVE-2026-23858?

Dell Wyse Management Suite is susceptible to a Cross-site Scripting (XSS) vulnerability that allows a low privileged attacker with remote access to potentially exploit the system. This vulnerability results from improper neutralization of input during web page generation, which can lead to script injection attacks. It underscores the importance of securing web applications to prevent unauthorized script execution and protect users from potential exploitation.

Affected Version(s)

Wyse Management Suite < 5.5

References

https://www.dell.com/support/kbdoc/en-us/000429141/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.