Product:
ThinOS
Summary
Dell ThinOS 10 versions prior to ThinOS 2602 contain a Command Injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. This could allow unauthorized access to sensitive system functions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-23862 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific commands that are improperly handled by the system. By executing these commands, the attacker can manipulate the system to gain elevated privileges, potentially compromising the integrity and confidentiality of the system.
Affected Products
- Dell ThinOS 10 versions prior to ThinOS 2602: Vulnerable to command injection leading to privilege escalation.
Mitigation
To mitigate this vulnerability, users should upgrade to ThinOS 2602 or later. Regularly applying security updates and patches can help protect against similar vulnerabilities in the future.