CVE-2026-81052
Received Received - Intake

Dell ThinOS Arbitrary Code Execution via Integrity Check Bypass

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: Dell

Description
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-81052
EUVD
EUVD-2026-75560

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell thinos to 2605_10.2616 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-494 The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell ThinOS 10 versions before 2605_10.2616 have a vulnerability where the system downloads code without verifying its integrity. This allows an unauthenticated attacker with physical access to execute arbitrary code on the device.

Detection Guidance

This vulnerability requires physical access to exploit, so detection primarily involves checking the Dell ThinOS version. Run the command 'show version' on ThinOS devices to verify if the version is prior to 2605_10.2616.

Impact Analysis

An attacker could gain control of the device, install malware, or access sensitive data. Since no authentication is required, the risk is high if physical access is possible.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and access control. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update Dell ThinOS to version 2605_10.2616 or later immediately. Ensure physical access to devices is restricted to authorized personnel only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81052. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart