CVE-2026-81468
Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CWE
- CWE-78
- Published
- 2026-09-10
- Last modified
- 2026-09-10
Affected products
- Dell ThinOS 10
Weakness type
Related vulnerabilities
- CVE-2026-73694 — FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition
- CVE-2026-73693 — FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
- CVE-2026-65639 — OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a...
- CVE-2026-65638 — Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated...
- CVE-2026-81467 — Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special...
- CVE-2026-64837 — ICEcoder through 8.1 OS Command Injection via lib/properties.php
- CVE-2026-88889 — Renovate before 44.14.7 Command Injection via distributionType
- CVE-2026-88888 — Renovate before 44.14.7 Command Injection via Mix organization