Zero Day MonitorZDM

← Back to list

8.6

CVE-2026-81455PATCHED

dell · thinos

CVE-2026-81455: Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function

Description

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected Products

Vendor	Product	Versions
dell	thinos	0

References

https://www.dell.com/support/kbdoc/en-us/000506503/dsa-2026-404-security-update-for-dell-thinos-10-for-multiple-vulnerabilities(vendor-advisory)

Related News (1 articles)

Tier C

VulDB3d ago

CVE-2026-81455 | Dell ThinOS up to 2605_10.2616 missing authentication

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.6 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

CISA KEV❌ No

Actively exploited❌ No

Patch available

SecurityAddon_2605.10.2766_T10

CWECWE-306

PublishedSep 24, 2026

Trending Score24

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-73591

CVE-2026-73591: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Infor

HIGHCVE-2026-81473

CVE-2026-81473: Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv

HIGHCVE-2026-82164

CVE-2026-82164: Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resourc

HIGHCVE-2026-82157

CVE-2026-82157: Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil

HIGHCVE-2026-73588

CVE-2026-73588: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Cr

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 24, 2026

Discovered by ZDM

Sep 24, 2026

Patch Available

Sep 24, 2026