Dell ThinOS 10 Security Bulletin: Multiple Vulnerabilities Fix including LPE and Info Disclosure CVEs

Vulnerability Overview Vulnerability ID: DSA-2026-214 Vulnerability Type: Multiple vulnerabilities in Dell ThinOS 10 Description: Multiple vulnerabilities exist in Dell ThinOS 10 that could be exploited by malicious actors to impact the system. Affected Products Affected Products: - Latitude 3440, 5440, 5450, 3420, 5540, 5550, 3330, 3450, 5520 (MHC), 5530 (MHC) - OptiPlex 7020, All-in-One 7410, All-in-One 7420, Micro Plus 7010, 5400 All-in-One, 3000 TC - Wyse 5070 Thin Client, 5070 Extended Thin Client, 5470 MTC, 5470 All-in-One Thin Client Affected Versions: - All ThinOS 10 versions prior to 2602_10.0765_T10 Remediation Fixed Version: - Upgrade to version 2602_10.0765_T10 or later Release Date: - May 15, 2026 Vulnerability Details CVE-2026-40715: - CVSS Base Score: 7.8 - CVSS Vector String: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Description: Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contains an improper access control vulnerability. A local low-privilege attacker may leverage this vulnerability to gain elevated privileges. CVE-2026-40713: - CVSS Base Score: 6.1 - CVSS Vector String: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Description: Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contains an improper access control vulnerability. An unauthorized attacker may leverage this vulnerability to cause information disclosure. Additional Information Related Components: - libpng, GNU C Library, Glib, Python, libsoup, Expat, GnuTLS, alsa-lib, OpenSSH Related CVEs: - CVE-2026-25446, CVE-2025-28162, CVE-2025-28164, CVE-2025-0915, CVE-2025-8038, CVE-2025-15281, CVE-2025-0861, CVE-2026-1485, CVE-2026-1484, CVE-2026-1489, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2025-13837, CVE-2025-11468, CVE-2026-0864, CVE-2026-1539, CVE-2026-1536, CVE-2026-1467, CVE-2026-24515, CVE-2026-25210, CVE-2025-14831, CVE-2025-9820, CVE-2026-25068, CVE-2025-32728 Summary Multiple security vulnerabilities exist in Dell ThinOS 10, affecting various product lines. Users are advised to upgrade to version 2602_10.0765_T10 or later as soon as possible to remediate these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Dell ThinOS 10 Security Bulletin: Multiple Vulnerabilities Fix including LPE and Info Disclosure CVEs