CVE-2026-81467

Published: Sep 10, 2026Modified: Sep 16, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: security_alert@emc.com (Secondary)

Description

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected (1)

Products: Dell: Thinos

Dell

1 product

Thinos

Configuration A

1 vulnerable · 39 platform

Vulnerable Software	Affected Versions
Dell Thinos	version < 2605_10.2616

Running on/with	Platform Versions
Dell Latitude 3330	All versions
Dell Latitude 3420	All versions
Dell Latitude 3440	All versions
Dell Latitude 3450	All versions
Dell Latitude 5440	All versions
Dell Latitude 5450	All versions
Dell Latitude 5520	All versions
Dell Latitude 5530	All versions
Dell Latitude 5540	All versions
Dell Latitude 5550	All versions
Dell Optiplex 3000 Tc	All versions
Dell Optiplex 5400 All In One	All versions
Dell Optiplex 7020	All versions
Dell Optiplex All In One 7410	All versions
Dell Optiplex All In One 7420	All versions
Dell Optiplex Micro Plus 7010	All versions
Dell Precision 3260 Compact	All versions
Dell Precision 3280	All versions
Dell Pro 14 Pc14250	All versions
Dell Pro 16 Pc16250	All versions
Dell Pro 16 Plus Pb16250	All versions
Dell Pro 24 All In One	All versions
Dell Pro 24 All In One (65w) Qc24250	All versions
Dell Pro 24 All In One Plus Qb24250	All versions
Dell Pro Max 14	All versions
Dell Pro Max 16 Plus	All versions
Dell Pro Max Microfcm2250	All versions
Dell Pro Micro Thin Client Q9m1260	All versions
Dell Pro Micro Qcm1250	All versions
Dell Pro Rugged 13 Ra13250	All versions
Dell Pro Rugged 14 Rb14250	All versions
Dell Pro Slim Low Sff	All versions
Dell Pro Slim Plus Xe5 Oem Qbs1250	All versions
Dell Pro Tower Plus Xe5 Oem Qbt1250	All versions
Dell Pro Tower Qct1250	All versions
Dell Wyse 5070 Extended Thin Client	All versions
Dell Wyse 5070 Thin Client	All versions
Dell Wyse 5470 All In One Thin Client	All versions
Dell Wyse 5470 Mtc	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (1)

https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.