CVE Catalog

CVE-2026-81048

CriticalCVSS 9.6
Published: Translated: NVD NIST

Summary

Dell ThinOS 10 versions prior to 2605_10.2616 contain a Command Injection vulnerability due to improper neutralization of special elements used in commands. An unauthenticated attacker with adjacent network access could exploit it to achieve remote code execution.

Risk Assessment

An attacker on the same network segment can remotely execute code on the ThinOS device, potentially leading to its compromise. This is especially risky where ThinOS devices share a network with untrusted hosts.

Recommendation

Upgrade Dell ThinOS 10 to version 2605_10.2616 or later. Segment the network to limit adjacent access to ThinOS devices.

Other vulnerabilities in Dell ThinOS 10

See all
Original NVD description (English source)

Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution

Vulnerability data from NVD (NIST) · CISA KEV · EPSS