← Database

CVE-2025-26331

HIGH CVSS: 7.8 Published: 2025-03-07 Modified: 2026-06-17

Description

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected Platforms

Dell Latitude 5440Dell Optiplex 5400 All-In-OneDell ThinosDell Optiplex 7410 All-In-OneDell Optiplex 7420 All-In-OneDell Latitude 3440Dell Latitude 5450Dell Latitude 3420Dell Wyse 5470 All-In-One Thin ClientDell Wyse 5470 Mobile Thin Client

Weakness Type

CWE-77

References