CVE-2026-81052

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*
OR cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5540:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_3000_tc:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_5400_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_7020:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7410:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_micro_plus_7010:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3260_compact:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3280:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_14_pc14250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_pc16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_plus_pb16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_\(65w\)_qc24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_14:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_16_plus:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_microfcm2250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro_qcm1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_13_ra13250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_14_rb14250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_low_sff:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_qct1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_mtc:-:*:*:*:*:*:*:*

History

16 Sep 2026, 20:47

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities - Vendor Advisory
CPE cpe:2.3:h:dell:optiplex_5400_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_16_plus:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_low_sff:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_plus_pb16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_14:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_micro_plus_7010:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_qct1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro_qcm1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_pc16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5540:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_\(65w\)_qc24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_mtc:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3280:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_14_pc14250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_microfcm2250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_7020:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_13_ra13250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7410:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_3000_tc:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3260_compact:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_14_rb14250:-:*:*:*:*:*:*:*
First Time Dell latitude 5520
Dell pro Micro-thin Client Q9m1260
Dell pro 16 Pc16250
Dell pro Max Microfcm2250
Dell wyse 5070 Extended Thin Client
Dell pro Micro Qcm1250
Dell latitude 5450
Dell precision 3280
Dell latitude 3450
Dell precision 3260 Compact
Dell pro 14 Pc14250
Dell latitude 3440
Dell pro Tower Qct1250
Dell optiplex All-in-one 7410
Dell wyse 5470 Mtc
Dell optiplex All-in-one 7420
Dell optiplex Micro Plus 7010
Dell latitude 5550
Dell pro 24 All-in-one Plus Qb24250
Dell pro Max 14
Dell
Dell pro 24 All-in-one \(65w\) Qc24250
Dell optiplex 7020
Dell latitude 5530
Dell pro Max 16 Plus
Dell pro Slim Plus Xe5 Oem Qbs1250
Dell latitude 5440
Dell pro Tower Plus Xe5 Oem Qbt1250
Dell wyse 5470 All-in-one Thin Client
Dell latitude 3420
Dell pro 24 All-in-one
Dell latitude 3330
Dell pro Rugged 14 Rb14250
Dell wyse 5070 Thin Client
Dell optiplex 3000 Tc
Dell latitude 5540
Dell pro 16 Plus Pb16250
Dell pro Slim Low Sff
Dell pro Rugged 13 Ra13250
Dell optiplex 5400 All-in-one
Dell thinos

Information

Published : 2026-09-10 16:17

Updated : 2026-09-16 20:47


NVD link : CVE-2026-81052

Mitre link : CVE-2026-81052

CVE.ORG link : CVE-2026-81052


JSON object : View

Products Affected

dell

  • pro_16_pc16250
  • pro_24_all-in-one_plus_qb24250
  • latitude_5550
  • pro_rugged_14_rb14250
  • pro_micro_qcm1250
  • latitude_3450
  • optiplex_micro_plus_7010
  • pro_max_16_plus
  • pro_tower_qct1250
  • latitude_3420
  • pro_tower_plus_xe5_oem_qbt1250
  • latitude_5520
  • wyse_5470_mtc
  • wyse_5070_extended_thin_client
  • thinos
  • precision_3260_compact
  • pro_24_all-in-one
  • pro_16_plus_pb16250
  • optiplex_3000_tc
  • pro_micro-thin_client_q9m1260
  • pro_rugged_13_ra13250
  • latitude_5450
  • pro_max_microfcm2250
  • pro_slim_plus_xe5_oem_qbs1250
  • pro_slim_low_sff
  • wyse_5070_thin_client
  • latitude_3440
  • optiplex_all-in-one_7410
  • optiplex_7020
  • precision_3280
  • pro_max_14
  • pro_24_all-in-one_\(65w\)_qc24250
  • optiplex_all-in-one_7420
  • optiplex_5400_all-in-one
  • latitude_3330
  • pro_14_pc14250
  • wyse_5470_all-in-one_thin_client
  • latitude_5540
  • latitude_5440
  • latitude_5530
CWE
CWE-494

Download of Code Without Integrity Check