CVE-2026-81467: OS Command Injection
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell ThinOS 10to a version that resolves this vulnerability.Fixed in 2605_10
Event History
Frequently Asked Questions
Which systems are exposed to this vulnerability?
Dell ThinOS 10 systems running versions earlier than 2605_10.2616 are affected. The issue is remotely reachable and does not require authentication or user interaction.
What would an attacker need to exploit it?
An attacker needs remote access to the affected ThinOS 10 system. No credentials, privileges, or user interaction are required according to the supplied severity vector.
What is the likely impact of successful exploitation?
Successful exploitation could allow OS command execution. The assigned critical severity vector indicates potential high impact to confidentiality, integrity, and availability.
How can I determine whether a device needs remediation?
Check the Dell ThinOS 10 version installed on the device. Versions prior to 2605_10.2616 should be treated as affected.