Zero Day MonitorZDM

← Back to list

8.3

CVE-2026-82157PATCHED

dell · thinos

CVE-2026-82157: Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil

Description

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access.

Affected Products

Vendor	Product	Versions
dell	thinos	0

References

https://www.dell.com/support/kbdoc/en-us/000506503/dsa-2026-404-security-update-for-dell-thinos-10-for-multiple-vulnerabilities(vendor-advisory)

Related News (1 articles)

Tier C

VulDB3d ago

CVE-2026-82157 | Dell ThinOS up to 2605_10.2616 certificate validation

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.3 HIGH

VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CISA KEV❌ No

Actively exploited❌ No

Patch available

SecurityAddon_2605.10.2766_T10

CWECWE-295

PublishedSep 24, 2026

Trending Score20

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-81455

CVE-2026-81455: Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function

HIGHCVE-2026-73591

CVE-2026-73591: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Infor

HIGHCVE-2026-81473

CVE-2026-81473: Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv

HIGHCVE-2026-82164

CVE-2026-82164: Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resourc

MEDIUMCVE-2026-56792

CVE-2026-56792: Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 24, 2026

Discovered by ZDM

Sep 24, 2026

Patch Available

Sep 25, 2026