What is the CVSS score of EUVD-2026-44744?

EUVD-2026-44744 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Thinos 10 are affected by EUVD-2026-44744?

Organizations using Dell ThinOS 10 thin-client endpoints (versions before 2605_10.2100) are exposed to unauthorized access through a dormant user interface component that allows local attackers to…. A patch is available.

How to fix or mitigate EUVD-2026-44744?

Within 24 hours, conduct a complete asset inventory of all Dell ThinOS 10 systems, identify those running versions prior to 2605_10.2100, and review access controls for low-privileged local users on these devices. Within 7 days, implement compensating controls by disabling or restricting access to the legacy UI pathway where technically feasible, strengthening local authentication policies, and segregating vulnerable systems on a dedicated network segment. Within 30 days, monitor Dell's advisory DSA-2026-300 for patch availability and develop a phased upgrade strategy to version 2605_10.2100 or later across the entire affected thin-client estate.

Thinos 10 EUVD-2026-44744

| CVE-2026-56687 HIGH

Obsolete Feature in UI (CWE-448)

2026-07-15 dell

GHSA-f966-26qc-phpg

Authentication Bypass Dell Thinos 10

7.8

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (dell) · only source for this CVE.

CVSS VectorVendor: dell

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 15, 2026 - 21:18 EUVD

Analysis Generated

Jul 15, 2026 - 18:32 vuln.today

CVE Published

Jul 15, 2026 - 17:33 cve.org

HIGH 7.8

DescriptionCVE.org

Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

AnalysisAI

Unauthorized access in Dell ThinOS 10 (versions prior to 2605_10.2100) stems from an obsolete UI feature (CWE-448) that a low-privileged local attacker can abuse to bypass authentication controls. With valid low-level local access to the thin-client, an attacker can leverage the leftover interface path to reach functionality or data they should not have, yielding high confidentiality, integrity, and availability impact per the CVSS 7.8 (High) rating. No public exploit identified at time of analysis; the flaw was reported by Dell and disclosed in advisory DSA-2026-300.