Priority MEDIUM 54
Dell ThinOS 10, versions prior to 2605_10.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02987 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-78
Priority MEDIUM 49
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.0055 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-284
Priority MEDIUM 47
Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.0235 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-77
Priority MEDIUM 45
Dell ThinOS 10, versions prior to 2605_10.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02003 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-78
Priority MEDIUM 43
Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00351 · Published 2025-08-27 · Fixed in 2508_10.0127 CWE-693
Priority MEDIUM 40
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.0083 · Published 2024-12-11 · No fix listed CWE-77
Priority LOW 38
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00215 · Published 2025-08-27 · Fixed in 2508_10.0127 CWE-88
Priority LOW 37
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00603 · Published 2025-03-07 · Fixed in ThinOS 2502 CWE-77
Priority LOW 36
Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00456 · Published 2026-03-16 · Fixed in 2602_10.0573_T10 CWE-77
Priority LOW 35
Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-08-24 · Fixed in 2605_10.2518 CWE-284
Priority LOW 35
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.001 · Published 2026-06-02 · Fixed in 2602_10.0765_T10 CWE-284
Priority LOW 35
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2025-08-27 · Fixed in 2508_10.0127 CWE-283
Priority LOW 35
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2025-08-27 · Fixed in 2508_10.0127 CWE-732
Priority LOW 35
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00138 · Published 2025-03-18 · Fixed in ThinOS 2502 CWE-732
Priority LOW 35
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00105 · Published 2024-12-11 · No fix listed CWE-367
Priority LOW 31
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00181 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-494
Priority LOW 31
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability.
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00196 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-1328
Priority LOW 30
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00119 · Published 2026-09-10 · Fixed in 2605_10.2616 CWE-353
Priority LOW 28
Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability.
CVSS 3.1MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.00152 · Published 2026-06-02 · Fixed in 2602_10.0765_T10 CWE-284
Priority LOW 25
Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability.
CVSS 3.1MEDIUM 5.7· Physical · No auth · No interaction · EPSS 0.00179 · Published 2025-05-29 · Fixed in 2505 CWE-312