CVE-2026-81052

Published: Sep 10, 2026Modified: Sep 16, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: security_alert@emc.com (Secondary)

Description

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected (1)

Products: Dell: Thinos

Dell

1 product

Thinos

Configuration A

1 vulnerable · 39 platform

Vulnerable Software	Affected Versions
Dell Thinos	version < 2605_10.2616

Running on/with	Platform Versions
Dell Latitude 3330	All versions
Dell Latitude 3420	All versions
Dell Latitude 3440	All versions
Dell Latitude 3450	All versions
Dell Latitude 5440	All versions
Dell Latitude 5450	All versions
Dell Latitude 5520	All versions
Dell Latitude 5530	All versions
Dell Latitude 5540	All versions
Dell Latitude 5550	All versions
Dell Optiplex 3000 Tc	All versions
Dell Optiplex 5400 All In One	All versions
Dell Optiplex 7020	All versions
Dell Optiplex All In One 7410	All versions
Dell Optiplex All In One 7420	All versions
Dell Optiplex Micro Plus 7010	All versions
Dell Precision 3260 Compact	All versions
Dell Precision 3280	All versions
Dell Pro 14 Pc14250	All versions
Dell Pro 16 Pc16250	All versions
Dell Pro 16 Plus Pb16250	All versions
Dell Pro 24 All In One	All versions
Dell Pro 24 All In One (65w) Qc24250	All versions
Dell Pro 24 All In One Plus Qb24250	All versions
Dell Pro Max 14	All versions
Dell Pro Max 16 Plus	All versions
Dell Pro Max Microfcm2250	All versions
Dell Pro Micro Thin Client Q9m1260	All versions
Dell Pro Micro Qcm1250	All versions
Dell Pro Rugged 13 Ra13250	All versions
Dell Pro Rugged 14 Rb14250	All versions
Dell Pro Slim Low Sff	All versions
Dell Pro Slim Plus Xe5 Oem Qbs1250	All versions
Dell Pro Tower Plus Xe5 Oem Qbt1250	All versions
Dell Pro Tower Qct1250	All versions
Dell Wyse 5070 Extended Thin Client	All versions
Dell Wyse 5070 Thin Client	All versions
Dell Wyse 5470 All In One Thin Client	All versions
Dell Wyse 5470 Mtc	All versions

Related CWEs

CWE-494

Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References (1)

https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.