CVE-2026-81048: dell thinos

CVSS 9.6 (critical) · published 2026-09-10

Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution

Affected products (NVD): dell thinos

Fixed in (NVD): 2605_10.2616

Weakness: CWE-77

Source: NVD CVE-2026-81048

References

• https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.