Threats Tagged 'cve-2026-23862'

CVE-2026-23862 is a high-severity command injection vulnerability in Dell ThinOS 10 versions prior to 2602_10.0573. It arises from improper neutralization of special elements in commands, allowing a low-privileged local attacker to execute arbitrary commands. Exploitation can lead to full elevation of privileges, compromising confidentiality, integrity, and availability of the affected system. No user interaction is required, but local access with low privileges is necessary. There are currently no known exploits in the wild, and no official patches have been linked yet. Organizations using ThinOS 10 thin clients should prioritize mitigation to prevent potential attacks. The vulnerability poses significant risk especially in environments relying heavily on Dell ThinOS thin clients, such as financial institutions and large enterprises. Countries with substantial deployments of Dell ThinOS thin clients and critical infrastructure are at higher risk. Immediate mitigation steps include restricting local access, monitoring for suspicious command execution, and preparing for prompt patch application once available.

HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2026-23862#cwe-77