High severity7.8NVD Advisory· Published Mar 7, 2025· Updated Jun 17, 2026

CVE-2025-26331

Description

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Wyse Proprietary OS (Modern ThinOS)v5
Range: N/A
Dell/ThinOSllm-fuzzy2 versions
<=2411+ 1 more
- (no CPE)range: <=2411
- cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*range: <=2411

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000289886/dsa-2025-107nvdVendor Advisory
www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-26331nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000