# CVE-2026-23862: Dell ThinOS command injection privilege escalation

Source: https://junglewise.ai/threats/cve-2026-23862-dell-thinos-command-injection-privilege-escalation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-16. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2026-23862 · Severity: high · CVSS 7.8 · Published 2026-03-16

Dell ThinOS is an operating system used in thin client devices for accessing virtual desktops and cloud applications. A security flaw allows a user with low-level access to the device to execute unauthorized commands with higher privileges. This could allow an attacker to take full control of the device, potentially compromising user data or the corporate network connection.

Technologies: [Dell ThinOS](https://junglewise.ai/threats/technologies/thinos). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-23862 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-23862 being exploited in the wild.

**How severe is CVE-2026-23862?** High severity, with a CVSS score of 7.8, published 16 March 2026.

**Which products and versions are affected?** Dell ThinOS Versions prior to 2602_10.0573_T10.

**Is there a fix for CVE-2026-23862?** A patch was published on 2026-03-09: Remediated versions released by Dell. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-23862 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2026-23862?** Check whether you run Dell ThinOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability (CWE-77) exists in Dell ThinOS 10 due to improper neutralization of special elements used in a command. An attacker with local access and low-level privileges can exploit this flaw to execute arbitrary commands with elevated permissions. The vulnerability is triggered without requiring user interaction. Dell has released remediated firmware versions (2602_10.0573_T10 or later) for affected Latitude, OptiPlex, and Wyse hardware platforms.

## Affected products

- Dell ThinOS 10 Versions prior to 2602_10.0573_T10

## Timeline

- 2026-03-09: patched: Remediated versions released by Dell.
- 2026-03-16: disclosed: Initial NVD publication.

## References

- [https://www.dell.com/support/kbdoc/en-us/000435801/dsa-2026-122](https://www.dell.com/support/kbdoc/en-us/000435801/dsa-2026-122)

## Related threats

- [Dell ThinOS 10 OS command injection](https://junglewise.ai/threats/cve-2026-81468-dell-thinos-10-os-command-injection)
- [Dell ThinOS 10 OS command injection](https://junglewise.ai/threats/cve-2026-81467-dell-thinos-10-os-command-injection)
- [Dell ThinOS 10 code integrity check bypass](https://junglewise.ai/threats/cve-2026-81052-dell-thinos-10-code-integrity-check-bypass)
- [Dell ThinOS 10 security version number bypass](https://junglewise.ai/threats/cve-2026-81051-dell-thinos-10-security-version-number-bypass)
- [Dell ThinOS 10 missing integrity check in code execution](https://junglewise.ai/threats/cve-2026-81049-dell-thinos-10-missing-integrity-check-in-code-execution)