CVE-2025-26331: Dell Thinos

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected products

• Dell Thinos: up to and including 2411

Published 2025-03-07. Last modified 2026-06-17.