CVE-2026-40715: Dell ThinOS 10, versions prior to ThinOS10 2602_10

Synopsis

An improper access control vulnerability affects Dell ThinOS 10 versions prior to 2602_10.0765_T10. The flaw is exploitable locally by any low-privileged user already on the system, requiring no network access and no victim interaction. Successful exploitation allows the attacker to escalate privileges, gaining full read, write, and availability control over the affected system. A patched-image rebuild at version 2602_10.0765_T10 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network path to the target is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient; the attacker does not need administrative credentials.

• Victim interactionNot required

  No user interaction is needed; the attacker can execute the exploit entirely on their own without involving another user.

• Attack complexityDetail

  Exploit complexity is low, meaning the attack is reliable and requires no special race conditions or environmental prerequisites.

Blast Radius

• A successful attacker escalates from a low-privilege user account to a higher-privilege or system-level context on the affected ThinOS host.
• Elevated privileges allow the attacker to read sensitive files, credentials, and configuration data stored on the device.
• Write access gained through privilege escalation lets the attacker modify system configuration, install malicious software, or alter persisted data.
• The attacker can disrupt or terminate system processes and services, causing the affected ThinOS endpoint to become unavailable.