AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-81048

Dell Technologies ThinOS 10: command injection

Dell Technologies

CVE-2026-81048 · Published Sep 10, 2026 · updated Sep 16, 2026

Critical9.6
Fix: upgrade to 2605_10.2616 or later
Dell Technologies advisory

Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution

Affected versions

PackageAffectedFixed in
ThinOS 10
Product
< 2605_10.26162605_10.2616
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-77

More Dell Technologies advisories

All Dell Technologies
Critical 9.8Sep 10Dell Technologies ThinOS 10: command injectionCVE-2026-81467fixed in 2605_10.2616Critical 9.1Sep 10Dell Technologies ThinOS 10: command injectionCVE-2026-81468fixed in 2605_10.2616Critical 9.4Sep 10Dell Technologies ThinOS 10: remote code executionCVE-2026-81046fixed in 2605_10.2616Medium 4.4Sep 10Dell Technologies ThinOS 10: code executionCVE-2026-81049fixed in 2605_10.2616Medium 6.6Sep 10Dell ThinOS 10, versions prior to 2605_10.2616CVE-2026-81051fixed in 2605_10.2616Medium 6.8Sep 10Dell Technologies ThinOS 10: remote code executionCVE-2026-81052fixed in 2605_10.2616