AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-82157

Dell Technologies ThinOS 10: improper certificate validation

Dell Technologies

CVE-2026-82157 · Published Sep 24, 2026 · updated Sep 25, 2026

High8.3
Fix: upgrade to SecurityAddon_2605.10.2766_T10 or later
Dell Technologies advisory

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access.

Affected versions

PackageAffectedFixed in
ThinOS 10
Product
< SecurityAddon_2605.10.2766_T10SecurityAddon_2605.10.2766_T10
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-295

More Dell Technologies advisories

All Dell Technologies
High 7.1Sep 24Dell Technologies Trusted Device Client,: insecure permissionsCVE-2026-82164fixed in Trusted Device Client +1High 8.6Sep 24Dell Technologies ThinOS 10: missing authenticationCVE-2026-81455fixed in SecurityAddon_2605.10.2766_T10High 8.1Sep 24Dell Technologies Rugged Control Center (RCC): improper authorizationCVE-2026-81473fixed in 5.2.206Medium 4.4Sep 24Dell Technologies Rugged Control Center (RCC): improper authorizationCVE-2026-56792fixed in 5.2.206High 7.5Sep 23Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73591fixed in 5.36.00.16 or laterMedium 6.4Sep 23Dell Technologies Secure Connect: insufficient session expirationCVE-2026-73586fixed in 5.36.00.16 or later