Dell ThinOS 10 EUVD-2026-75563

Exploitation requires physical access to the ThinOS 10 device (AV:P) and a low-privileged account on the device (PR:L). The attacker must be able to interact with the firmware's SVN storage - likely through a BIOS/UEFI menu, firmware update interface, or writable NVRAM accessible from the OS layer. Exploitation is limited to: physical device access, possession of low-privileged credentials, and knowledge of the SVN storage mechanism sufficient to overwrite it. Remote exploitation is not possible. High-privilege or administrative credentials are not required, but unauthenticated exploitation is also not possible - some account-level access is needed per the PR:L vector.

Real-world risk is moderate despite high C/I/A CVSS sub-scores. The CVSS vector AV:P/AC:L/PR:L constrains exploitation to an attacker who has both physical possession of and low-privilege authentication to the device - a significant limiting factor. The EPSS data is not provided, and the vulnerability is not listed in CISA KEV, indicating no confirmed active or widespread exploitation. No public exploit code is referenced. The scenario most relevant to defenders is insider threat or supply chain attack (e.g., a device intercepted in transit or accessed in an unlocked office/medical cart). The high C/I/A scores reflect that a successful downgrade enables subsequent exploitation of older, patched vulnerabilities on the rolled-back firmware - the impact is indirect rather than immediate. CVSS overall score of 6.6 (Medium) is reasonable given the physical access prerequisite, though 'Authentication Bypass' tag mislabels the mechanism (see data_quality_flags).

An attacker - such as a disgruntled employee or visitor with momentary access to an unattended thin client - authenticates with a low-privileged account, modifies the Security Version Number register to an older value through a firmware interface or writable storage, and then flashes a prior vulnerable firmware version. No public exploit code is referenced, so exploitation currently requires specific knowledge of the ThinOS firmware internals and the SVN storage mechanism.