What is the CVSS score of CVE-2026-56687?

CVE-2026-56687 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Which versions of Thinos 10 are affected by CVE-2026-56687?

Organizations using Dell ThinOS 10 thin-client endpoints (versions before 2605_10.2100) are exposed to unauthorized access through a dormant user interface component that allows local attackers to…

How to fix or mitigate CVE-2026-56687?

Within 24 hours, conduct a complete asset inventory of all Dell ThinOS 10 systems, identify those running versions prior to 2605_10.2100, and review access controls for low-privileged local users on these devices. Within 7 days, implement compensating controls by disabling or restricting access to the legacy UI pathway where technically feasible, strengthening local authentication policies, and segregating vulnerable systems on a dedicated network segment. Within 30 days, monitor Dell's advisory DSA-2026-300 for patch availability and develop a phased upgrade strategy to version 2605_10.2100 or later across the entire affected thin-client estate.

Thinos 10 CVE-2026-56687

HIGH

Obsolete Feature in UI (CWE-448)

2026-07-15 dell

Authentication Bypass Dell Thinos 10

7.8

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (dell) · only source for this CVE.

CVSS VectorVendor: dell

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 15, 2026 - 18:32 vuln.today

CVE Published

Jul 15, 2026 - 17:33 cve.org

HIGH 7.8

DescriptionCVE.org

Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

AnalysisAI

Unauthorized access in Dell ThinOS 10 (versions prior to 2605_10.2100) stems from an obsolete UI feature (CWE-448) that a low-privileged local attacker can abuse to bypass authentication controls. With valid low-level local access to the thin-client, an attacker can leverage the leftover interface path to reach functionality or data they should not have, yielding high confidentiality, integrity, and availability impact per the CVSS 7.8 (High) rating. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, conduct a complete asset inventory of all Dell ThinOS 10 systems, identify those running versions prior to 2605_10.2100, and review access controls for low-privileged local users on these devices. …

Threat intelligence, references, and detailed analysis are available after sign-in.