CVE-2026-40713 MEDIUM

CVE-2026-40713

Vendor Dell
Product ThinOS 10
Weakness CWE-284
Published June 2, 2026
Last update June 2, 2026

CVSS base score

6.1/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information exposure.

Key dates

02Disclosure timeline

June 2, 2026 CVE published
June 2, 2026 Record updated