CVE-2026-81468
critical · 9.1Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
9.1
CVSS
2.0%
EPSS (exploit prob.)
81st
EPSS percentile
2026-09-10
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dell | thinos | < 2605_10.2616 |
| dell | latitude_3330 | all versions |
| dell | latitude_3420 | all versions |
| dell | latitude_3440 | all versions |
| dell | latitude_3450 | all versions |
| dell | latitude_5440 | all versions |
| dell | latitude_5450 | all versions |
| dell | latitude_5520 | all versions |
| dell | latitude_5530 | all versions |
| dell | latitude_5540 | all versions |
| dell | latitude_5550 | all versions |
| dell | optiplex_3000_tc | all versions |
| dell | optiplex_5400_all-in-one | all versions |
| dell | optiplex_7020 | all versions |
| dell | optiplex_all-in-one_7410 | all versions |
| dell | optiplex_all-in-one_7420 | all versions |
| dell | optiplex_micro_plus_7010 | all versions |
| dell | precision_3260_compact | all versions |
| dell | precision_3280 | all versions |
| dell | pro_14_pc14250 | all versions |
| dell | pro_16_pc16250 | all versions |
| dell | pro_16_plus_pb16250 | all versions |
| dell | pro_24_all-in-one | all versions |
| dell | pro_24_all-in-one_(65w)_qc24250 | all versions |
| dell | pro_24_all-in-one_plus_qb24250 | all versions |
| dell | pro_max_14 | all versions |
| dell | pro_max_16_plus | all versions |
| dell | pro_max_microfcm2250 | all versions |
| dell | pro_micro-thin_client_q9m1260 | all versions |
| dell | pro_micro_qcm1250 | all versions |
| dell | pro_rugged_13_ra13250 | all versions |
| dell | pro_rugged_14_rb14250 | all versions |
| dell | pro_slim_low_sff | all versions |
| dell | pro_slim_plus_xe5_oem_qbs1250 | all versions |
| dell | pro_tower_plus_xe5_oem_qbt1250 | all versions |
| dell | pro_tower_qct1250 | all versions |
| dell | wyse_5070_extended_thin_client | all versions |
| dell | wyse_5070_thin_client | all versions |
| dell | wyse_5470_all-in-one_thin_client | all versions |
| dell | wyse_5470_mtc | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-81468