EUVD-2026-75570
GHSA-fh5q-4h4q-ppp3
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Network-reachable OS command injection requiring existing high privileges (PR:H); command execution escapes component context (S:C) with full C/I/A impact on the device.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
AnalysisAI
OS command injection in Dell ThinOS 10 (all builds prior to 2605_10.2616) lets a high-privileged remote attacker execute arbitrary operating-system commands on the thin-client endpoint. The flaw (CWE-78) carries a CVSS 9.1 with a scope change, reflecting that injected commands can break out of the intended context and impact the broader system. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires high privileges on the target (CVSS PR:H) - the attacker must already be an administrator or hold equivalent elevated management access to Dell ThinOS 10, so this is not an unauthenticated attack. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The raw CVSS of 9.1 is high, but the vector meaningfully qualifies the real-world risk: AV:N/AC:L/UI:N make exploitation network-reachable and low-complexity, yet PR:H means the attacker must already hold high privileges on the device, which substantially narrows the practical attacker population to administrators, compromised management credentials, or an attacker who has already gained elevated access through another flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: update Dell ThinOS 10 to build 2605_10.2616 or later, following Dell advisory DSA-2026-389 (https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities); ThinOS is typically pushed to endpoints via Wyse Management Suite, so stage the updated firmware package and roll it to device groups. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of Dell ThinOS 10 devices in production and verify current build versions; immediately notify infrastructure and device management teams of the critical vulnerability and patch availability. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in Dell ThinOS 10 (versions prior to 2605_10.2616) allows an unauthenticated remote attacker to in
Analysis complete. Summary of what I produced and flagged: **CVE-2026-81048 — Dell ThinOS 10 command injection (CWE-77)
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) allows a remote, unauthenticated attacker
Improper access control in Dell ThinOS 10 (all versions prior to 2605_10.2518) enables a local low-privileged user to by
Local privilege escalation in Dell ThinOS 10 versions prior to ThinOS10 2602_10.0765 allows a low-privileged user with l
Unauthorized access in Dell ThinOS 10 (versions prior to 2605_10.2100) stems from an obsolete UI feature (CWE-448) that
Arbitrary code execution on Dell ThinOS 10 (all versions prior to 2605_10.2616) is possible when an unauthenticated atta
Dell ThinOS 10 firmware allows a low-privileged attacker with physical device access to overwrite the Security Version N
Physical access to Dell ThinOS 10 endpoints running versions prior to ThinOS10 2602_10.0765 allows an unauthenticated at
Protection mechanism failure in Dell ThinOS 10 (versions prior to 2605_10.2100) allows an unauthenticated attacker with
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) is enabled by a missing integrity check (C
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today