Description
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Published: 2026-09-10
Score: 6.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Protection Mechanism Bypass
Action: Apply Patch
AI Analysis

Impact

Dell ThinOS 10 releases prior to build 2605_10.2616 contain a flaw that allows a low‑privileged user with physical access to downgrade the security version number. This manipulation can bypass protection mechanisms and is an example of CWE‑1328.

Affected Systems

This vulnerability affects Dell ThinOS 10 in all versions before build 2605_10.2616. The affected vendor is Dell and the product is ThinOS 10.

Risk and Exploitability

The CVSS score is 6.6, indicating moderate severity. No EPSS score is publicly available, and the vulnerability is not listed in CISA KEV. Because the condition requires proximity to the device, the exploitation risk is limited to environments where the device is physically accessible.

Generated by OpenCVE AI on September 10, 2026 at 18:13 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply Dell Security Update DSA-2026-389 to upgrade ThinOS to build 2605_10.2616 or newer.
  • Enforce physical security controls to restrict unauthorized hardware access, including lock‑out policies verify patch compatibility and deployment plan.
  • Establish a regular patch management schedule to keep ThinOS devices up to date and reduce exposure to this vulnerability.

Generated by OpenCVE AI on September 10, 2026 at 18:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell latitude 3330
Dell latitude 3420
Dell latitude 3440
Dell latitude 3450
Dell latitude 5440
Dell latitude 5450
Dell latitude 5520
Dell latitude 5530
Dell latitude 5540
Dell latitude 5550
Dell optiplex 3000 Tc
Dell optiplex 5400 All-in-one
Dell optiplex 7020
Dell optiplex All-in-one 7410
Dell optiplex All-in-one 7420
Dell optiplex Micro Plus 7010
Dell precision 3260 Compact
Dell precision 3280
Dell pro 14 Pc14250
Dell pro 16 Pc16250
Dell pro 16 Plus Pb16250
Dell pro 24 All-in-one
Dell pro 24 All-in-one \(65w\) Qc24250
Dell pro 24 All-in-one Plus Qb24250
Dell pro Max 14
Dell pro Max 16 Plus
Dell pro Max Microfcm2250
Dell pro Micro-thin Client Q9m1260
Dell pro Micro Qcm1250
Dell pro Rugged 13 Ra13250
Dell pro Rugged 14 Rb14250
Dell pro Slim Low Sff
Dell pro Slim Plus Xe5 Oem Qbs1250
Dell pro Tower Plus Xe5 Oem Qbt1250
Dell pro Tower Qct1250
Dell wyse 5070 Extended Thin Client
Dell wyse 5070 Thin Client
Dell wyse 5470 All-in-one Thin Client
Dell wyse 5470 Mtc
CPEs cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5440:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5450:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5540:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_3000_tc:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_5400_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_7020:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7410:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_all-in-one_7420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:optiplex_micro_plus_7010:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3260_compact:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3280:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_14_pc14250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_pc16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_16_plus_pb16250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_\(65w\)_qc24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_24_all-in-one_plus_qb24250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_14:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_16_plus:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_max_microfcm2250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro-thin_client_q9m1260:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_micro_qcm1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_13_ra13250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_rugged_14_rb14250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_low_sff:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_slim_plus_xe5_oem_qbs1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_plus_xe5_oem_qbt1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:pro_tower_qct1250:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5070_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:wyse_5470_mtc:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*
Vendors & Products Dell latitude 3330
Dell latitude 3420
Dell latitude 3440
Dell latitude 3450
Dell latitude 5440
Dell latitude 5450
Dell latitude 5520
Dell latitude 5530
Dell latitude 5540
Dell latitude 5550
Dell optiplex 3000 Tc
Dell optiplex 5400 All-in-one
Dell optiplex 7020
Dell optiplex All-in-one 7410
Dell optiplex All-in-one 7420
Dell optiplex Micro Plus 7010
Dell precision 3260 Compact
Dell precision 3280
Dell pro 14 Pc14250
Dell pro 16 Pc16250
Dell pro 16 Plus Pb16250
Dell pro 24 All-in-one
Dell pro 24 All-in-one \(65w\) Qc24250
Dell pro 24 All-in-one Plus Qb24250
Dell pro Max 14
Dell pro Max 16 Plus
Dell pro Max Microfcm2250
Dell pro Micro-thin Client Q9m1260
Dell pro Micro Qcm1250
Dell pro Rugged 13 Ra13250
Dell pro Rugged 14 Rb14250
Dell pro Slim Low Sff
Dell pro Slim Plus Xe5 Oem Qbs1250
Dell pro Tower Plus Xe5 Oem Qbt1250
Dell pro Tower Qct1250
Dell wyse 5070 Extended Thin Client
Dell wyse 5070 Thin Client
Dell wyse 5470 All-in-one Thin Client
Dell wyse 5470 Mtc

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 13 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell thinos
Vendors & Products Dell
Dell thinos

Thu, 10 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title ThinOS 10 Security Version Number Downgrade Vulnerability Allows Protection Mechanism Bypass

Thu, 10 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Description Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Weaknesses CWE-1328
References
Metrics cvssV3_1

{'score': 6.6, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Dell Latitude 3330 Latitude 3420 Latitude 3440 Latitude 3450 Latitude 5440 Latitude 5450 Latitude 5520 Latitude 5530 Latitude 5540 Latitude 5550 Optiplex 3000 Tc Optiplex 5400 All-in-one Optiplex 7020 Optiplex All-in-one 7410 Optiplex All-in-one 7420 Optiplex Micro Plus 7010 Precision 3260 Compact Precision 3280 Pro 14 Pc14250 Pro 16 Pc16250 Pro 16 Plus Pb16250 Pro 24 All-in-one Pro 24 All-in-one \(65w\) Qc24250 Pro 24 All-in-one Plus Qb24250 Pro Max 14 Pro Max 16 Plus Pro Max Microfcm2250 Pro Micro-thin Client Q9m1260 Pro Micro Qcm1250 Pro Rugged 13 Ra13250 Pro Rugged 14 Rb14250 Pro Slim Low Sff Pro Slim Plus Xe5 Oem Qbs1250 Pro Tower Plus Xe5 Oem Qbt1250 Pro Tower Qct1250 Thinos Wyse 5070 Extended Thin Client Wyse 5070 Thin Client Wyse 5470 All-in-one Thin Client Wyse 5470 Mtc
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-14T15:41:31.973Z

Reserved: 2026-08-26T15:50:35.363Z

Link: CVE-2026-81051

cve-icon Vulnrichment

Updated: 2026-09-14T15:39:50.884Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-10T16:17:57.800

Modified: 2026-09-16T20:50:43.283

Link: CVE-2026-81051

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-13T19:30:18Z

Weaknesses
  • CWE-1328

    Security Version Number Mutable to Older Versions