CVE-2026-81455: Dell ThinOS 10 missing authentication in critical function

CVE-2026-81455 · Severity: high · CVSS 8.6 · Published 2026-09-24

Dell ThinOS 10 is an operating system for thin client devices used in enterprise environments. An unauthenticated attacker can remotely exploit a missing authentication control in a critical function, bypassing access restrictions and gaining unauthorized control of the affected system. This could allow attackers to compromise sensitive data or disable business-critical thin client infrastructure.

Technologies: Dell ThinOS 10. Vendors: Dell.

Quick answers

Is CVE-2026-81455 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-81455 being exploited in the wild.
How severe is CVE-2026-81455?
High severity, with a CVSS score of 8.6, published 24 September 2026.
Which products and versions are affected?
Dell ThinOS 10 Prior to SecurityAddon_2605.10.2766_T10.
Is there a fix for CVE-2026-81455?
A patch was published on 2026-09-10: SecurityAddon_2605.10.2766_T10 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-81455 attacked?
It is attacked over the network, in an operating system.
Am I affected by CVE-2026-81455?
Check whether you run Dell ThinOS 10 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authentication vulnerability exists in Dell ThinOS 10 prior to SecurityAddon_2605.10.2766_T10, allowing unauthenticated remote attackers to access critical functions without credentials. The vulnerability requires no user interaction and can be exploited over the network. Successful exploitation grants unauthorized access to the system with impact on confidentiality and integrity.

Affected products

  • Dell ThinOS 10 Prior to SecurityAddon_2605.10.2766_T10

Timeline

  • 2026-09-24: disclosed
  • 2026-09-10: patched: SecurityAddon_2605.10.2766_T10 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.