9.6 CriticalCWE-77
CVE-2026-81048
Dell ThinOS 10 vulnerability
DellThinOS 10
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
2.4%probability of exploitation in the next 30 days
Higher than 83% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution
Coverage 1 article · 1 outlet
- Dell Fixes Critical ThinOS Flaws Enabling Remote Command ExecutionSecurityOnline · first in our coverage · mentions it in passing