CVE-2026-81467
Quick assessment
Affected
Dell ThinOS 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell ThinOS 10，在 2605_10.2616 之前的版本中，存在一个“操作系统命令注入”漏洞（即未正确中和 OS 命令中使用的特殊字符/元素）。拥有远程访问权限的未认证攻击者可能利用此漏洞，从而导致命令被执行（任意命令执行）。
Possible ATT&CK Techniques 1 AI
T1059.004 · Unix Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81467
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-81467
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81467
请登录查看更多情报信息。
Same Patch Batch · Dell · 2026-09-10 · 7 CVEs total
| CVE-2026-81048 | 9.6 CRITICAL | Dell ThinOS 10.2616前版本命令注入漏洞 |
| CVE-2026-81046 | 9.4 CRITICAL | Dell ThinOS 10.2616前 保护机制失败 |
| CVE-2026-81468 | 9.1 CRITICAL | Dell ThinOS 10远程OS命令注入漏洞 |
| CVE-2026-81052 | 6.8 MEDIUM | Dell ThinOS 10.2616 代码下载无完整性校验 |
| CVE-2026-81051 | 6.6 MEDIUM | Dell ThinOS 10.2616前安全版本号可变漏洞 |
| CVE-2026-81049 | 4.4 MEDIUM | Dell ThinOS 10.2616缺失完整性检查致任意代码执行 |
IV. Related Vulnerabilities
Same weakness: CWE-78
-
CVE-2026-73693
FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet -
CVE-2026-65638
ConfigServer Security & Firewall 16.30前 远程未认证RCE -
CVE-2026-65639
ConfigServer Security & Firewall 16.30以下OS命令注入 -
CVE-2026-81468
Dell ThinOS 10远程OS命令注入漏洞 -
CVE-2026-64837
ICEcoder through 8.1 OS Command Injection via lib/properties
V. Comments for CVE-2026-81467
No comments yet