Description
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Published: 2026-09-10
Score: 6.6 Medium
EPSS: n/a
KEV: No
Impact: Protection Mechanism Bypass
Action: Apply Patch
AI Analysis

Impact

Dell ThinOS 10 releases prior to build 2605_10.2616 contain a flaw that allows a low‑privileged user with physical access to downgrade the security version number. This manipulation can bypass protection mechanisms and is an example of CWE‑1328.

Affected Systems

This vulnerability affects Dell ThinOS 10 in all versions before build 2605_10.2616. The affected vendor is Dell and the product is ThinOS 10.

Risk and Exploitability

The CVSS score is 6.6, indicating moderate severity. No EPSS score is publicly available, and the vulnerability is not listed in CISA KEV. Because the condition requires proximity to the device, the exploitation risk is limited to environments where the device is physically accessible.

Generated by OpenCVE AI on September 10, 2026 at 18:13 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Dell Security Update DSA-2026-389 to upgrade ThinOS to build 2605_10.2616 or newer.
  • Enforce physical security controls to restrict unauthorized hardware access, including lock‑out policies verify patch compatibility and deployment plan.
  • Establish a regular patch management schedule to keep ThinOS devices up to date and reduce exposure to this vulnerability.

Generated by OpenCVE AI on September 10, 2026 at 18:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title ThinOS 10 Security Version Number Downgrade Vulnerability Allows Protection Mechanism Bypass

Thu, 10 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Description Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Weaknesses CWE-1328
References
Metrics cvssV3_1

{'score': 6.6, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-10T15:37:10.998Z

Reserved: 2026-08-26T15:50:35.363Z

Link: CVE-2026-81051

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-10T16:17:57.800

Modified: 2026-09-10T16:17:57.800

Link: CVE-2026-81051

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T18:15:06Z

Weaknesses
  • CWE-1328

    Security Version Number Mutable to Older Versions