CVE-2026-82157
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an improper certificate validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to protection mechanism bypass and unauthorized access.
Risk Assessment
An attacker on the adjacent network could bypass protection mechanisms and gain unauthorized access to Dell ThinOS 10 devices, potentially compromising confidentiality and integrity.
Recommendation
Update Dell ThinOS 10 to SecurityAddon_2605.10.2766_T10 or later.
Other vulnerabilities in Dell ThinOS 10
See all- CVE-2026-81468Critical
Dell ThinOS 10, versions prior to 2605_10.2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
- CVE-2026-81467Critical
Dell ThinOS 10 versions prior to 2605_10.2616 contain an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. An unauthenticated attacker with remote access could exploit it to execute arbitrary commands.
- CVE-2026-81048Critical
Dell ThinOS 10 versions prior to 2605_10.2616 contain a Command Injection vulnerability due to improper neutralization of special elements used in commands. An unauthenticated attacker with adjacent network access could exploit it to achieve remote code execution.
- CVE-2026-81046Critical
Dell ThinOS 10 versions prior to 2605_10.2616 contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could exploit it to achieve arbitrary code execution within the application context.
- CVE-2026-81455High
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
- CVE-2026-81052Medium
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution.
- CVE-2026-81051Medium
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-81049Medium
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
- CVE-2026-61419High
Dell ThinOS 10 versions prior to 2605_10.2518 contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this, leading to unauthorized access.
- CVE-2026-56687High
Dell ThinOS 10 versions prior to 2605_10.2100 contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
Original NVD description (English source)
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

