CVE-2026-61419
Received Received - Intake

Improper Access Control in Dell ThinOS

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: Dell

Description
Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-25
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-61419
EUVD
EUVD-2026-65086

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell thinos to 2605_10.2518 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell ThinOS 10 versions before 2605_10.2518 have an Improper Access Control flaw. A low-privileged attacker with local access could exploit this to gain unauthorized access to the system.

Detection Guidance

Detection requires checking Dell ThinOS version against 2605_10.2518. Use system management tools or CLI commands like 'show version' on ThinOS devices to verify software version.

Impact Analysis

An attacker could access sensitive data, modify system settings, or install malicious software. This could lead to data breaches, system disruptions, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR (data protection) and HIPAA (health data privacy). Organizations may face fines, legal penalties, and reputational damage.

Mitigation Strategies

Update Dell ThinOS to version 2605_10.2518 or later immediately. Restrict local access to authorized users only and monitor for unauthorized changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61419. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart