Vulnerability Details CVE-2025-26331
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.0%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2025-26331
-
cpe:2.3:h:dell:latitude_3420:-
-
cpe:2.3:h:dell:latitude_3440:-
-
cpe:2.3:h:dell:latitude_5440:-
-
cpe:2.3:h:dell:latitude_5450:-
-
cpe:2.3:h:dell:optiplex_3000_thin_client:-
-
cpe:2.3:h:dell:optiplex_5400_all-in-one:-
-
cpe:2.3:h:dell:optiplex_7410_all-in-one:-
-
cpe:2.3:h:dell:optiplex_7420_all-in-one:-
-
cpe:2.3:h:dell:wyse_5070_thin_client:-
-
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-
-
cpe:2.3:h:dell:wyse_5470_mobile_thin_client:-
-
cpe:2.3:o:dell:thinos:*