CVE-2026-81467Critical· 9.8▾ MidnightDell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially explo…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 11.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
3.8%
Last analysed / modified upstream
Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
thinos < 2605_10.2616Upgrade past the affected range:
thinos 2605_10.2616Connected by shared product, vendor, weakness, or advisory.
CVE-2026-81468Critical· 9.1Dell ThinOS 10, versions prior to 2605_10
CVE-2026-81052Medium· 6.8Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability
CVE-2026-81048Critical· 9.6Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability
CVE-2026-81046Critical· 9.4Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability
CVE-2026-81049Medium· 4.4Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability
CVE-2026-81051Medium· 6.6Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability