CVE-2026-23858

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23858
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script Injection.

5.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*
History

25 Feb 2026, 14:50

Type Values Removed Values Added
CPE cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*
References () https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103 - () https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103 - Patch, Vendor Advisory
First Time Dell
Dell wyse Management Suite

24 Feb 2026, 20:27

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-24 20:27

Updated : 2026-02-25 14:50

NVD link : CVE-2026-23858

Mitre link : CVE-2026-23858

CVE.ORG link : CVE-2026-23858

JSON object : View

Products Affected

dell

  • wyse_management_suite
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')