CVE-2026-81046 – Dell ThinOS 10

Dell has fixed six vulnerabilities in ThinOS 10. Four are Critical and two are High. Most of these flaws require no authentication. Some can be reached remotely and others from an adjacent network, and they can lead to remote code execution, OS command execution, unauthorized access, or a bypass of security protections. CVE-2026-81467 has a CVSS score of 9.8, Critical severity, and allows unauthenticated OS command injection. CVE-2026-81048 has a CVSS score of 9.6, Critical severity, and allows an attacker on the adjacent network to run code remotely through command injection. CVE-2026-81046 has a CVSS score of 9.4, Critical severity, and is a protection mechanism failure that leads to arbitrary code execution. CVE-2026-81468 has a CVSS score of 9.1, Critical severity, and allows OS command injection by a high-privileged attacker.

The two High-severity flaws undermine trust and access controls. CVE-2026-81455 has a CVSS score of 8.6, High severity, and is a missing authentication check on a critical function. CVE-2026-82157 has a CVSS score of 8.3, High severity, and is an improper certificate validation flaw that allows an attacker to bypass protections and gain unauthorized access. Release 2605_10.2616 fixes the four Critical flaws. SecurityAddon_2605.10.2766_T10 fixes the two High flaws. Deploy both updates to fully protect ThinOS 10 endpoints.