CISA ADP Vulnrichment

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps Dell/ThinOS 10 (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for Dell/ThinOS 10.
2. 2Review the reported fix. Update Dell/ThinOS 10 to 2605_10.2518 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

1. Published upstream

   Aug 24, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Aug 25, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Aug 24, 2026

Sources and claim methodology

• Source referencedell.com

Related CVEs

• Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site ScriptingSame generic ecosystem
• Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' ParametersSame generic ecosystem
• tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingSame generic ecosystem
• Stack buffer overflow in OCPP GetConfiguration key parsingSame generic ecosystem
• Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem imageSame generic ecosystem
• Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array KeysSame generic ecosystem