CVE-2024-53290

Dell ThinOS 2408 is affected by a local, unauthenticated Command Injection due to improper neutralization of special elements. The CVE-2024-53290 entry documents allow command execution with high impact (C/H, I/H, A/H) and a local attack vector; no exploitation or patch details are confirmed in t...

CVE-2024-53289

CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...

CVE-2025-32752

Dell ThinOS 2502 and earlier versions are affected by a Cleartext Storage of Sensitive Information vulnerability. The root cause is storing sensitive data in clear text, enabling information disclosure when a high-privileged attacker gains physical access. Practical impact is information disclosu...

CVE-2025-27688

Dell ThinOS 2408 and earlier contain an improper permissions vulnerability that can lead to local elevation of privilege by a low-privileged attacker with local access. The issue arises from improper privilege settings in the OS (as described across multiple sources). Affected product: Dell ThinO...

CVE-2025-26331

Dell ThinOS CVE-2025-26331 affects ThinOS 2411 and earlier. The vulnerability is an Improper Neutralization of Special Elements used in a Command (Command Injection) issue that could allow a low-privilege, local attacker to execute arbitrary code. Reported metrics indicate CVSSv3.1 base score 7.8...

CVE-2026-40715

Summary: Dell ThinOS 10 (pre-2602_10.0765) contains an Improper Access Control vulnerability that enables privilege escalation for a low-privilege, locally authenticated attacker. Affected component: ThinOS 10; root cause: improper access control. Impact: potential privilege escalation. Exploitat...

CVE-2026-23862

CVE-2026-23862 affects Dell ThinOS 10 versions prior to ThinOS 2602_10.0573. The vulnerability is an Improper Neutralization of Special Elements in a Command (command injection) that could be exploited by a low-privileged local attacker to achieve Elevation of Privileges. The impact is high for c...

CVE-2026-81467

Dell ThinOS 10 (versions prior to 2605_10.2616 ) is affected by an OS Command Injection vulnerability. An unauthenticated attacker with remote network access can exploit this flaw to achieve arbitrary command execution on the device. Dell assigned a CVSS v3.1 score of 9.8 (Critical) , reflecting ...

CVE-2026-81046

Dell ThinOS 10 versions prior to 2605_10.2616 are affected by a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote network access can potentially exploit this flaw to achieve Arbitrary Code Execution within the application context. The CNA-assigned CVSS 3.1 score ...

CVE-2026-40713

CVE-2026-40713 concerns Dell ThinOS 10, specifically versions prior to ThinOS10_2602_10.0765, with an improper access control vulnerability. The vulnerability allows an unauthenticated attacker who has physical access to potentially cause information exposure. The available documents do not provi...

CVE-2026-81468

Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A high-privileged attacker with remote access could potentially exploit this flaw to achieve command execution on the device....

CVE-2025-43728

Dell ThinOS 10 prior to 2508_10.0127 contains a Protection Mechanism Failure vulnerability (CVE-2025-43728). An unauthenticated attacker with remote access could exploit it to bypass the protection mechanism, with impact described as high confidentiality, integrity, and availability. Remediation ...

CVE-2026-61419

Dell ThinOS 10 versions prior to 2605_10.2518 are affected by an Improper Access Control vulnerability. A low-privileged attacker with local access can exploit this flaw to gain unauthorized access , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , ve...

CVE-2025-43729

Dell ThinOS 10 is affected by an Elevation of Privileges vulnerability due to Incorrect Permission Assignment for a Critical Resource. Affected versions are prior to 2508_10.0127. Local, low-privilege attackers could exploit this to gain unauthorized access. The issue is mitigated by upgrading De...

CVE-2025-43882

Dell ThinOS 10 is affected by CVE-2025-43882. Prior to version 2508_10.0127, an unverified ownership condition could allow a local, low-privileged attacker to achieve Unauthorized Access. The issue is documented across multiple sources (including Red Hat and PT Security references) with a CVSSv3....

CVE-2026-81049

Dell ThinOS 10 , in versions prior to 2605_10.2616 , is affected by a Missing Support for Integrity Check vulnerability. A high-privileged attacker with local access can potentially exploit this flaw to achieve arbitrary code execution . The CVSS 3.1 score is 4.4 (MEDIUM) , with the primary impac...

CVE-2025-43730

Dell ThinOS 10 is affected by an Improper Neutralization of Argument Delimiters in a Command (Argument Injection) vulnerability. Affected: Dell ThinOS 10 before 2508_10.0127. Impact per sources: local elevation of privileges and information disclosure for a local unauthenticated user. Root cause:...

CVE-2026-81048

Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by a Command Injection vulnerability (Improper Neutralization of Special Elements used in a Command). An unauthenticated attacker with adjacent network access could exploit this to achieve Remote Code Execution , with a CVSS 3.1 score ...

CVE-2026-81051

Dell ThinOS 10 , in versions prior to 2605_10.2616 , is affected by a Security Version Number Mutable to Older Versions vulnerability. A low-privileged attacker with physical access can potentially exploit this flaw to bypass the system's protection mechanism, resulting in high impact across conf...

CVE-2026-81052

Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this flaw to achieve arbitrary code execution , resulting in high impact to confidentiality, integr...