CVE-2026-40715
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Dell ThinOS 10 versions prior to 2602_10.0765 contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
Risk Assessment
Risk of privilege escalation by a local attacker, potentially leading to unauthorized access to sensitive data or the system.
Recommendation
It is recommended to update Dell ThinOS 10 to version 2602_10.0765 or later.
Other vulnerabilities in Dell ThinOS
See all- CVE-2026-61419High
Dell ThinOS 10 versions prior to 2605_10.2518 contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this, leading to unauthorized access.
- CVE-2026-56687High
Dell ThinOS 10 versions prior to 2605_10.2100 contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
- CVE-2026-56087Medium
Dell ThinOS 10 versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could exploit this flaw to gain unauthorized access to encrypted data.
- CVE-2026-40713Medium
Dell ThinOS 10 versions prior to 2602_10.0765 contain an improper access control vulnerability. An unauthenticated attacker with physical access could exploit this to expose information.
Original NVD description (English source)
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.