Paper/Archive/CVE-2026-81467

CVE-2026-81467

Dell ThinOS 10 — Dell ThinOS 10, versions prior to 2605_10.

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 87.3.873 × 2017.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected

ProductAffectedFixed inSource

ThinOS 10< 2605_10.26162605_10.2616CNA

Scores by source

dell (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities