← Database

CVE-2026-81048

CRITICAL CVSS: 9.6 Published: 2026-09-10 Modified: 2026-09-16

Description

Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution

Affected Platforms

Dell Latitude 3330Dell Pro 16 Plus Pb16250Dell Pro 24 All-In-OneDell Latitude 3450Dell Pro 14 Pc14250Dell Pro Slim Low SffDell Pro Micro Qcm1250Dell Latitude 3420Dell Optiplex 3000 TcDell Optiplex All-In-One 7410

Weakness Type

CWE-77

References