7.8
High
CVE-2025-26331 Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command…
Description
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wyse Proprietary OS (Modern ThinOS) | Versions not published |
Other CVEs of Wyse Proprietary OS (Modern ThinOS)
The 11 CVEs of Wyse Proprietary OS (Modern ThinOS) →
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability
7.8
High
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
7.8
High
CVE-2024-53290
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection')…
8.4
High
CVE-2024-42423
Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when…
6.1
Medium