CVE Catalog

CVE-2026-81467

CriticalCVSS 9.8
Published: Translated: NVD NIST

Summary

Dell ThinOS 10 versions prior to 2605_10.2616 contain an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. An unauthenticated attacker with remote access could exploit it to execute arbitrary commands.

Risk Assessment

The flaw allows an unauthenticated remote attacker to execute OS commands, potentially leading to full compromise of the endpoint. All unpatched Dell ThinOS 10 installations are affected.

Recommendation

Upgrade Dell ThinOS 10 to version 2605_10.2616 or later. Until patched, restrict network access to ThinOS devices.

Other vulnerabilities in Dell ThinOS 10

See all
Original NVD description (English source)

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS