CVE-2026-81467 - Vulnerability Details

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.03841.

Exploitation none

Automatable yes

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Dell

ThinOS 10

unaffected

Version	Status	Constraints
`0`	affected	< 2605_10.2616

Configuration 1 [-]

AND

cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:dell:latitude_3330:-:::::::*
	cpe:2.3:h:dell:latitude_3420:-:::::::*
	cpe:2.3:h:dell:latitude_3440:-:::::::*
	cpe:2.3:h:dell:latitude_3450:-:::::::*
	cpe:2.3:h:dell:latitude_5440:-:::::::*
	cpe:2.3:h:dell:latitude_5450:-:::::::*
	cpe:2.3:h:dell:latitude_5520:-:::::::*
	cpe:2.3:h:dell:latitude_5530:-:::::::*
	cpe:2.3:h:dell:latitude_5540:-:::::::*
	cpe:2.3:h:dell:latitude_5550:-:::::::*
	cpe:2.3:h:dell:optiplex_3000_tc:-:::::::*
	cpe:2.3:h:dell:optiplex_5400_all-in-one:-:::::::*
	cpe:2.3:h:dell:optiplex_7020:-:::::::*
	cpe:2.3:h:dell:optiplex_all-in-one_7410:-:::::::*
	cpe:2.3:h:dell:optiplex_all-in-one_7420:-:::::::*
	cpe:2.3:h:dell:optiplex_micro_plus_7010:-:::::::*
	cpe:2.3:h:dell:precision_3260_compact:-:::::::*
	cpe:2.3:h:dell:precision_3280:-:::::::*
	cpe:2.3:h:dell:pro_14_pc14250:-:::::::*
	cpe:2.3:h:dell:pro_16_pc16250:-:::::::*
	cpe:2.3:h:dell:pro_16_plus_pb16250:-:::::::*
	cpe:2.3:h:dell:pro_24_all-in-one:-:::::::*
	cpe:2.3:h:dell:pro_24_all-in-one_\(65w\)_qc24250:-:::::::*
	cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-:::::::*
	cpe:2.3:h:dell:pro_max_14:-:::::::*
	cpe:2.3:h:dell:pro_max_16_plus:-:::::::*
	cpe:2.3:h:dell:pro_max_microfcm2250:-:::::::*
	cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-:::::::*
	cpe:2.3:h:dell:pro_micro_qcm1250:-:::::::*
	cpe:2.3:h:dell:pro_rugged_13_ra13250:-:::::::*
	cpe:2.3:h:dell:pro_rugged_14_rb14250:-:::::::*
	cpe:2.3:h:dell:pro_slim_low_sff:-:::::::*
	cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-:::::::*
	cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-:::::::*
	cpe:2.3:h:dell:pro_tower_qct1250:-:::::::*
	cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:::::::*
	cpe:2.3:h:dell:wyse_5070_thin_client:-:::::::*
	cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:::::::*
	cpe:2.3:h:dell:wyse_5470_mtc:-:::::::*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Dell Subscribe	Thinos Subscribe

Project Subscriptions

Vendors	Products
Dell Subscribe	Latitude 3330 Subscribe Latitude 3420 Subscribe Latitude 3440 Subscribe Latitude 3450 Subscribe Latitude 5440 Subscribe Latitude 5450 Subscribe Latitude 5520 Subscribe Latitude 5530 Subscribe Latitude 5540 Subscribe Latitude 5550 Subscribe Optiplex 3000 Tc Subscribe Optiplex 5400 All-in-one Subscribe Optiplex 7020 Subscribe Optiplex All-in-one 7410 Subscribe Optiplex All-in-one 7420 Subscribe Optiplex Micro Plus 7010 Subscribe Precision 3260 Compact Subscribe Precision 3280 Subscribe Pro 14 Pc14250 Subscribe Pro 16 Pc16250 Subscribe Pro 16 Plus Pb16250 Subscribe Pro 24 All-in-one Subscribe Pro 24 All-in-one \(65w\) Qc24250 Subscribe Pro 24 All-in-one Plus Qb24250 Subscribe Pro Max 14 Subscribe Pro Max 16 Plus Subscribe Pro Max Microfcm2250 Subscribe Pro Micro-thin Client Q9m1260 Subscribe Pro Micro Qcm1250 Subscribe Pro Rugged 13 Ra13250 Subscribe Pro Rugged 14 Rb14250 Subscribe Pro Slim Low Sff Subscribe Pro Slim Plus Xe5 Oem Qbs1250 Subscribe Pro Tower Plus Xe5 Oem Qbt1250 Subscribe Pro Tower Qct1250 Subscribe Thinos Subscribe Wyse 5070 Extended Thin Client Subscribe Wyse 5070 Thin Client Subscribe Wyse 5470 All-in-one Thin Client Subscribe Wyse 5470 Mtc Subscribe

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities

History

Wed, 16 Sep 2026 21:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell latitude 3330 Dell latitude 3420 Dell latitude 3440 Dell latitude 3450 Dell latitude 5440 Dell latitude 5450 Dell latitude 5520 Dell latitude 5530 Dell latitude 5540 Dell latitude 5550 Dell optiplex 3000 Tc Dell optiplex 5400 All-in-one Dell optiplex 7020 Dell optiplex All-in-one 7410 Dell optiplex All-in-one 7420 Dell optiplex Micro Plus 7010 Dell precision 3260 Compact Dell precision 3280 Dell pro 14 Pc14250 Dell pro 16 Pc16250 Dell pro 16 Plus Pb16250 Dell pro 24 All-in-one Dell pro 24 All-in-one \(65w\) Qc24250 Dell pro 24 All-in-one Plus Qb24250 Dell pro Max 14 Dell pro Max 16 Plus Dell pro Max Microfcm2250 Dell pro Micro-thin Client Q9m1260 Dell pro Micro Qcm1250 Dell pro Rugged 13 Ra13250 Dell pro Rugged 14 Rb14250 Dell pro Slim Low Sff Dell pro Slim Plus Xe5 Oem Qbs1250 Dell pro Tower Plus Xe5 Oem Qbt1250 Dell pro Tower Qct1250 Dell wyse 5070 Extended Thin Client Dell wyse 5070 Thin Client Dell wyse 5470 All-in-one Thin Client Dell wyse 5470 Mtc
CPEs		cpe:2.3:h:dell:latitude_3330:-:::::::* cpe:2.3:h:dell:latitude_3420:-:::::::* cpe:2.3:h:dell:latitude_3440:-:::::::* cpe:2.3:h:dell:latitude_3450:-:::::::* cpe:2.3:h:dell:latitude_5440:-:::::::* cpe:2.3:h:dell:latitude_5450:-:::::::* cpe:2.3:h:dell:latitude_5520:-:::::::* cpe:2.3:h:dell:latitude_5530:-:::::::* cpe:2.3:h:dell:latitude_5540:-:::::::* cpe:2.3:h:dell:latitude_5550:-:::::::* cpe:2.3:h:dell:optiplex_3000_tc:-:::::::* cpe:2.3:h:dell:optiplex_5400_all-in-one:-:::::::* cpe:2.3:h:dell:optiplex_7020:-:::::::* cpe:2.3:h:dell:optiplex_all-in-one_7410:-:::::::* cpe:2.3:h:dell:optiplex_all-in-one_7420:-:::::::* cpe:2.3:h:dell:optiplex_micro_plus_7010:-:::::::* cpe:2.3:h:dell:precision_3260_compact:-:::::::* cpe:2.3:h:dell:precision_3280:-:::::::* cpe:2.3:h:dell:pro_14_pc14250:-:::::::* cpe:2.3:h:dell:pro_16_pc16250:-:::::::* cpe:2.3:h:dell:pro_16_plus_pb16250:-:::::::* cpe:2.3:h:dell:pro_24_all-in-one:-:::::::* cpe:2.3:h:dell:pro_24_all-in-one_\(65w\)_qc24250:-:::::::* cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-:::::::* cpe:2.3:h:dell:pro_max_14:-:::::::* cpe:2.3:h:dell:pro_max_16_plus:-:::::::* cpe:2.3:h:dell:pro_max_microfcm2250:-:::::::* cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-:::::::* cpe:2.3:h:dell:pro_micro_qcm1250:-:::::::* cpe:2.3:h:dell:pro_rugged_13_ra13250:-:::::::* cpe:2.3:h:dell:pro_rugged_14_rb14250:-:::::::* cpe:2.3:h:dell:pro_slim_low_sff:-:::::::* cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-:::::::* cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-:::::::* cpe:2.3:h:dell:pro_tower_qct1250:-:::::::* cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:::::::* cpe:2.3:h:dell:wyse_5070_thin_client:-:::::::* cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:::::::* cpe:2.3:h:dell:wyse_5470_mtc:-:::::::* cpe:2.3:o:dell:thinos::::::::
Vendors & Products		Dell latitude 3330 Dell latitude 3420 Dell latitude 3440 Dell latitude 3450 Dell latitude 5440 Dell latitude 5450 Dell latitude 5520 Dell latitude 5530 Dell latitude 5540 Dell latitude 5550 Dell optiplex 3000 Tc Dell optiplex 5400 All-in-one Dell optiplex 7020 Dell optiplex All-in-one 7410 Dell optiplex All-in-one 7420 Dell optiplex Micro Plus 7010 Dell precision 3260 Compact Dell precision 3280 Dell pro 14 Pc14250 Dell pro 16 Pc16250 Dell pro 16 Plus Pb16250 Dell pro 24 All-in-one Dell pro 24 All-in-one \(65w\) Qc24250 Dell pro 24 All-in-one Plus Qb24250 Dell pro Max 14 Dell pro Max 16 Plus Dell pro Max Microfcm2250 Dell pro Micro-thin Client Q9m1260 Dell pro Micro Qcm1250 Dell pro Rugged 13 Ra13250 Dell pro Rugged 14 Rb14250 Dell pro Slim Low Sff Dell pro Slim Plus Xe5 Oem Qbs1250 Dell pro Tower Plus Xe5 Oem Qbt1250 Dell pro Tower Qct1250 Dell wyse 5070 Extended Thin Client Dell wyse 5070 Thin Client Dell wyse 5470 All-in-one Thin Client Dell wyse 5470 Mtc

Sun, 13 Sep 2026 19:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell Dell thinos
Vendors & Products		Dell Dell thinos

Fri, 11 Sep 2026 16:45:00 +0000

Type	Values Removed	Values Added
Title		Remote Command Injection Vulnerability in Dell ThinOS 10

Fri, 11 Sep 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 10 Sep 2026 18:00:00 +0000

Type	Values Removed	Values Added
Title	Improper Neutralization of Special Elements Used in OS Command Injection in Dell ThinOS 10

Thu, 10 Sep 2026 16:45:00 +0000

Type	Values Removed	Values Added
Title		Improper Neutralization of Special Elements Used in OS Command Injection in Dell ThinOS 10

Thu, 10 Sep 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Weaknesses		CWE-78
References		https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-09-10T15:40:57.565Z

Updated: 2026-09-11T13:06:07.065Z

Reserved: 2026-08-26T20:04:54.732Z

Link: CVE-2026-81467

Vulnrichment

Updated: 2026-09-11T12:56:25.615Z

NVD

Status : Analyzed

Published: 2026-09-10T16:17:58.040

Modified: 2026-09-16T20:47:19.350

Link: CVE-2026-81467

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-13T19:30:18Z

Weaknesses

CWE-78

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object