CVE-2026-56087

MediumCVSS 6.1/10Last modified Oct 24, 2026

Description

Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulnerability, leading to unauthorized access to encrypted data.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Dell	ThinOS 10	< 2605_10.2100

References

https://www.dell.com/support/kbdoc/en-us/000489640/dsa-2026-300-security-update-for-dell-thinos-10-for-multiple-vulnerabilities

Timeline

Published: Jul 15, 2026
Last modified: Oct 24, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-560888.8Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In CVE-2026-560893.3Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could po CVE-2026-56098.8A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSI CVE-2026-560907.3Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with lo CVE-2026-560918.2When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication b CVE-2026-560927.6The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forge CVE-2026-560936.3The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlik CVE-2026-560946.3The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash fil CVE-2026-560957.7The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring CVE-2026-560966.3The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcard CVE-2026-560976.5A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application CVE-2026-560984.3A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execu