EUVD-2026-33977
GHSA-972f-c53g-w92c
Severity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Primary rating from Vendor (dell) · only source for this CVE.
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information exposure.
AnalysisAI
Physical access to Dell ThinOS 10 endpoints running versions prior to ThinOS10 2602_10.0765 allows an unauthenticated attacker to bypass access controls, exposing sensitive information with high confidentiality and integrity impact. The flaw, rooted in CWE-284 (Improper Access Control), enables circumvention of authentication or authorization mechanisms at the device level without requiring prior credentials. No active exploitation has been confirmed (not in CISA KEV) and no public exploit has been identified; Dell has released a patched build addressing this issue.
Technical ContextAI
Dell ThinOS is a purpose-built, locked-down operating system for thin client endpoints used in VDI and desktop virtualization deployments. The affected CPE (cpe:2.3:a:dell:thinos_10) covers all ThinOS 10 builds prior to 2602_10.0765. CWE-284 (Improper Access Control) indicates the system fails to adequately enforce access restrictions on resources or functionality - in this case, a physically present attacker can interact with the device in a manner that bypasses intended controls without supplying credentials. The CVSS vector AV:P confirms physical proximity is mandatory, while AC:L and PR:N indicate the attack requires neither special configuration knowledge nor prior authentication. The C:H and I:H impact components suggest both sensitive data readability and potential modification of system state are in scope, while A:N indicates availability is unaffected.
RemediationAI
Upgrade Dell ThinOS 10 to version ThinOS10 2602_10.0765 or later, as specified in Dell's advisory DSA-2026-214 at https://www.dell.com/support/kbdoc/en-us/000463678/dsa-2026-214. Where immediate patching is not feasible, compensating controls must focus on physical security: deploy thin client devices in locked enclosures or restricted rooms, apply chassis cable locks to prevent device removal or port access, and enforce BIOS/firmware passwords to block unauthorized boot sequences. Additionally, restricting physical port access (USB, serial) via endpoint configuration can reduce the attack surface accessible to a walk-up attacker. These physical controls do not remediate the underlying access control flaw and carry the trade-off of operational friction for legitimate users - they should be treated as temporary mitigations pending patch deployment.
Remote code execution in Dell ThinOS 10 (versions prior to 2605_10.2616) allows an unauthenticated remote attacker to in
Analysis complete. Summary of what I produced and flagged: **CVE-2026-81048 — Dell ThinOS 10 command injection (CWE-77)
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) allows a remote, unauthenticated attacker
OS command injection in Dell ThinOS 10 (all builds prior to 2605_10.2616) lets a high-privileged remote attacker execute
Improper access control in Dell ThinOS 10 (all versions prior to 2605_10.2518) enables a local low-privileged user to by
Local privilege escalation in Dell ThinOS 10 versions prior to ThinOS10 2602_10.0765 allows a low-privileged user with l
Unauthorized access in Dell ThinOS 10 (versions prior to 2605_10.2100) stems from an obsolete UI feature (CWE-448) that
Arbitrary code execution on Dell ThinOS 10 (all versions prior to 2605_10.2616) is possible when an unauthenticated atta
Dell ThinOS 10 firmware allows a low-privileged attacker with physical device access to overwrite the Security Version N
Protection mechanism failure in Dell ThinOS 10 (versions prior to 2605_10.2100) allows an unauthenticated attacker with
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) is enabled by a missing integrity check (C
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today