Vulnerability Details CVE-2026-81468
Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 82.3%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2026-81468
-
cpe:2.3:h:dell:latitude_3330:-
-
cpe:2.3:h:dell:latitude_3440:-
-
cpe:2.3:h:dell:latitude_3450:-
-
cpe:2.3:h:dell:latitude_5440:-
-
cpe:2.3:h:dell:latitude_5450:-
-
cpe:2.3:h:dell:latitude_5520:-
-
cpe:2.3:h:dell:latitude_5540:-
-
cpe:2.3:h:dell:optiplex_3000_tc:-
-
cpe:2.3:h:dell:optiplex_5400_all-in-one:-
-
cpe:2.3:h:dell:optiplex_7020:-
-
cpe:2.3:h:dell:optiplex_all-in-one_7420:-
-
cpe:2.3:h:dell:optiplex_micro_plus_7010:-
-
cpe:2.3:h:dell:pro_14_pc14250:-
-
cpe:2.3:h:dell:pro_16_pc16250:-
-
cpe:2.3:h:dell:pro_16_plus_pb16250:-
-
cpe:2.3:h:dell:pro_24_all-in-one:-
-
cpe:2.3:h:dell:pro_24_all-in-one_(65w)_qc24250:-
-
cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-
-
cpe:2.3:h:dell:pro_max_16_plus:-
-
cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-
-
cpe:2.3:h:dell:pro_micro_qcm1250:-
-
cpe:2.3:h:dell:pro_rugged_13_ra13250:-
-
cpe:2.3:h:dell:pro_slim_low_sff:-
-
cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-
-
cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-
-
cpe:2.3:h:dell:pro_tower_qct1250:-
-
cpe:2.3:h:dell:wyse_5070_extended_thin_client:-
-
cpe:2.3:h:dell:wyse_5070_thin_client:-
-
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-
-
cpe:2.3:o:dell:thinos:2402
-
cpe:2.3:o:dell:thinos:2408
-
cpe:2.3:o:dell:thinos:2411
-
cpe:2.3:o:dell:thinos:2502
-
cpe:2.3:o:dell:thinos:2602