CVE-2026-23862: Dell Thinos

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Affected products

• Dell Thinos: from 2602, before 2602.10.0573 (fixed in 2602.10.0573)

Published 2026-03-16. Last modified 2026-06-17.