Improper Access Control in Dell ThinOS Affecting Multiple Versions
CVE-2026-61419

7.8HIGH

Key Information:

Vendor

Dell
Status
Thinos 10
Vendor
CVE Published:
24 August 2026

What is CVE-2026-61419?

Dell ThinOS 10 prior to version 2605_10.2518 is affected by an Improper Access Control vulnerability. This security flaw allows a low privileged attacker with local access to potentially exploit the system, leading to unauthorized access. It is crucial for users and administrators to ensure that they are running an updated version of ThinOS to mitigate this risk. For further details, refer to the security advisory from Dell.

Affected Version(s)

ThinOS 10 0 < 2605_10.2518

References

https://www.dell.com/support/kbdoc/en-us/000496575/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank SuperDevSecurity for reporting this issue.
.