CVE-2026-81048
Quick assessment
Affected
Dell ThinOS 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell ThinOS 10 版本中，早于 2605_10.2616 的版本存在一个“命令注入”（Command Injection）漏洞，其根本原因是用于命令中的特殊元素未得到妥善中和（Improper Neutralization of Special Elements used in a Command）。 具有相邻网络访问权限的未认证攻击者可能利用此漏洞，进而导致远程代码执行（Remote Code Execution）。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81048
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-81048
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81048
请登录查看更多情报信息。
Same Patch Batch · Dell · 2026-09-10 · 7 CVEs total
| CVE-2026-81467 | 9.8 CRITICAL | Dell ThinOS 10<2605_10.2616 OS命令注入 |
| CVE-2026-81046 | 9.4 CRITICAL | Dell ThinOS 10.2616前 保护机制失败 |
| CVE-2026-81468 | 9.1 CRITICAL | Dell ThinOS 10远程OS命令注入漏洞 |
| CVE-2026-81052 | 6.8 MEDIUM | Dell ThinOS 10.2616 代码下载无完整性校验 |
| CVE-2026-81051 | 6.6 MEDIUM | Dell ThinOS 10.2616前安全版本号可变漏洞 |
| CVE-2026-81049 | 4.4 MEDIUM | Dell ThinOS 10.2616缺失完整性检查致任意代码执行 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-81048
No comments yet