CVE-2026-81049
CVE-2026-81049 is a medium-severity vulnerability in Dell Thinos with a CVSS 3.x base score of 4.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-353.
Key facts
- Severity: Medium (CVSS 3.x base score 4.4)
- EPSS exploit prediction: 0% (2nd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-353
- Affected product: Dell Thinos
- Published:
- Last modified:
Description
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
Frequently asked questions
- What is CVE-2026-81049?
- Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
- How severe is CVE-2026-81049?
- CVE-2026-81049 has a CVSS 3.x base score of 4.4, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2026-81049 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2026-81049?
- CVE-2026-81049 affects Dell Thinos. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2026-81049?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-81049 published?
- CVE-2026-81049 was published on 2026-09-10 and last updated on 2026-09-16.
References
Affected products (1)
- cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*
More vulnerabilities in Dell Thinos
- CVE-2026-81467 — Critical (CVSS 9.8): Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS…
- CVE-2026-81048 — Critical (CVSS 9.6): Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a…
- CVE-2025-43728 — Critical (CVSS 9.6): Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An…
- CVE-2026-81046 — Critical (CVSS 9.4): Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An…
- CVE-2026-81468 — Critical (CVSS 9.1): Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS…
- CVE-2025-43730 — High (CVSS 8.4): Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command…
All CVEs affecting Dell Thinos →
Other CWE-353 vulnerabilities
- CVE-2026-7574 — High (CVSS 8.7): Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0,…
- CVE-2026-17583 — High (CVSS 8.4): The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be…
- CVE-2026-76853 — High (CVSS 8.1): Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi…
- CVE-2024-46917 — High (CVSS 8.1): Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root…
- CVE-2021-28545 — High (CVSS 8.1): Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and…
- CVE-2024-27817 — High (CVSS 7.8): The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS…