CVE-2026-81467Disclosure(dell / latitude_3330)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dell latitude_3330 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • latitude_3330
  • latitude_3420
  • latitude_3440
  • latitude_3450

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-11); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
Products
latitude_3330latitude_3420latitude_3440latitude_3450latitude_5440latitude_5450latitude_5520latitude_5530latitude_5540latitude_5550

1 version affected across 40 products

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-09-10: 1Mentions · 2026-09-11: 2Mentions · 2026-09-17: 1Patch / Workaround · 2026-09-11: 2Technical Details · 2026-09-11: 2Technical Details · 2026-09-17: 109-1009-1109-17
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-09-101
Disclosure1
2026-09-112
Disclosure1Patch1
2026-09-171
Disclosure1
Full discourse4 posts
  • CCB Alert@CCBalert
    Disclosure

    Warning: A critical OS command injection vulnerability in #Dell ThinOS 10 allows unauthenticated remote attackers to execute commands. CVE-2026-81467 CVSS(3.1): 9.8. #RCE Read the advisory: https://www.dell.com/support/kbdoc/fr-be/000502746/dsa-2026-389-security-update-for-dell-thinos-10-for-multiple-vulnerabilities and #Patch #Patch #Patch

    Post summary

    Dell ThinOS 10 has a critical OS command injection vulnerability (CVE‑2026‑81467) enabling unauthenticated remote command execution. A patch is available through the Dell advisory.

    01001318
    7.2K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Dell patched critical Dell ThinOS vulnerabilities, including CVE-2026-81467. Update your ThinOS clients now to stop remote code execution attacks. #Dell #ThinOS #Cybersecurity #Vulnerabilities #CVE202681467 https://securityonline.info/dell-thinos-vulnerabilities-patch/ https://t.co/e4VqIHVfB4

    Post summary

    The post announces that Dell has released patches for critical ThinOS vulnerabilities (including CVE-2026-81467) and urges immediate client updates to mitigate remote code execution risks.

    00010370
    12.9K followersView on X
  • NotCVE@notCVE
    Disclosure

    🎯 Most likely to be exploited next (EPSS): • CVE-2026-85706 — EPSS 12% · CVSS 10 • CVE-2026-76698 — EPSS 4.1% · CVSS 6.5 • CVE-2026-81467 — EPSS 3.8% · CVSS 9.8 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-09-17.md

    Post summary

    The tweet lists three CVEs with their EPSS and CVSS scores, indicating they are likely to be exploited next, and links to weekly tables for further details. No PoC, exploit, patch, or active exploitation is mentioned.

    0000041
    72 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    There is a new vulnerability with elevated criticality in Dell ThinOS (CVE-2026-81467) https://vuldb.com/vuln/402131

    Post summary

    A new critical vulnerability (CVE-2026-81467) has been announced for Dell ThinOS, with additional information referenced via the provided link.

    0000089
    2.3K followersView on X
CPE platform detail40 entries

40 of 40 entries

PartVendorProductVersionTarget SWTarget HW
HWdelllatitude_3330---
HWdelllatitude_3420---
HWdelllatitude_3440---
HWdelllatitude_3450---
HWdelllatitude_5440---
HWdelllatitude_5450---
HWdelllatitude_5520---
HWdelllatitude_5530---
HWdelllatitude_5540---
HWdelllatitude_5550---
HWdelloptiplex_3000_tc---
HWdelloptiplex_5400_all-in-one---
HWdelloptiplex_7020---
HWdelloptiplex_all-in-one_7410---
HWdelloptiplex_all-in-one_7420---
HWdelloptiplex_micro_plus_7010---
HWdellprecision_3260_compact---
HWdellprecision_3280---
HWdellpro_14_pc14250---
HWdellpro_16_pc16250---
HWdellpro_16_plus_pb16250---
HWdellpro_24_all-in-one---
HWdellpro_24_all-in-one_\(65w\)_qc24250---
HWdellpro_24_all-in-one_plus_qb24250---
HWdellpro_max_14---
HWdellpro_max_16_plus---
HWdellpro_max_microfcm2250---
HWdellpro_micro-thin_client_q9m1260---
HWdellpro_micro_qcm1250---
HWdellpro_rugged_13_ra13250---
HWdellpro_rugged_14_rb14250---
HWdellpro_slim_low_sff---
HWdellpro_slim_plus_xe5_oem_qbs1250---
HWdellpro_tower_plus_xe5_oem_qbt1250---
HWdellpro_tower_qct1250---
OSdellthinos---
HWdellwyse_5070_extended_thin_client---
HWdellwyse_5070_thin_client---
HWdellwyse_5470_all-in-one_thin_client---
HWdellwyse_5470_mtc---

Explore more