CVE-2026-81046
Dell ThinOS 10 versions before 2605_10.2616 contain a protection‑mechanism failure that could let an unauthenticated attacker run arbitrary code on the device. The flaw is exploitable remotely without authentication or user interaction. It is rated critical with a CVSS score of 9.4.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Dell ThinOS 10 firmware versions earlier than 2605_10.2616, used on Dell thin client devices.
Real-world impact
An attacker could execute arbitrary code on the ThinOS device, potentially taking full control, accessing sensitive data, or using the device as a launch point for further attacks.
Why this severity
The CVSS score of 9.4 reflects that the vulnerability is remotely exploitable with no authentication or user interaction, and it can lead to full code execution, which severely impacts confidentiality and integrity.
What to do about it
- ›Upgrade the ThinOS firmware to version 2605_10.2616 or later, if available, or contact Dell for guidance.
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
NVD-referenced vendor advisory