# Weak password recovery in Dell Pro 14 Essential PV14250 and others CVE record · `CVE-2025-36579` - **Identifiers:** `CVE-2025-36579` - **State:** Confirmed - **Severity:** CVSS 5.1 Medium - **Critical:** No - **CNA:** dell - **Weakness (CWE):** [CWE-640](https://cwe.mitre.org/data/definitions/640.html) - **Tags:** [CWE-640](https://agentprime.io/advisories/tag/cwe-640.md) - **Technologies:** [Dell Pro 14 Essential PV14250](https://agentprime.io/advisories/technology/dell-pro-14-essential-pv14250.md) · [Dell Pro Micro / QCM1255](https://agentprime.io/advisories/technology/dell-pro-micro-qcm1255.md) · [Dell Pro Slim / QCS1255](https://agentprime.io/advisories/technology/dell-pro-slim-qcs1255.md) · [Dell Pro Tower / QCT1255](https://agentprime.io/advisories/technology/dell-pro-tower-qct1255.md) · [Dell Alienware 16 Area-51 AA16250](https://agentprime.io/advisories/technology/dell-alienware-16-area-51-aa16250.md) · [Dell Alienware 16X Aurora AC16251](https://agentprime.io/advisories/technology/dell-alienware-16x-aurora-ac16251.md) · [Dell Alienware 18 Area-51 AA18250](https://agentprime.io/advisories/technology/dell-alienware-18-area-51-aa18250.md) · [Dell Alienware Area-51 AAT225](https://agentprime.io/advisories/technology/dell-alienware-area-51-aat225.md) · [Dell Alienware Aurora ACT1250](https://agentprime.io/advisories/technology/dell-alienware-aurora-act1250.md) · [Dell Alienware m15 R6](https://agentprime.io/advisories/technology/dell-alienware-m15-r6.md) · [Dell Alienware m15 R7](https://agentprime.io/advisories/technology/dell-alienware-m15-r7.md) · [Dell Alienware m16 R1](https://agentprime.io/advisories/technology/dell-alienware-m16-r1.md) · [Dell Alienware m16 R2](https://agentprime.io/advisories/technology/dell-alienware-m16-r2.md) · [Dell Alienware m18 R1](https://agentprime.io/advisories/technology/dell-alienware-m18-r1.md) · [Dell Alienware M18 R2](https://agentprime.io/advisories/technology/dell-alienware-m18-r2.md) · [Dell Alienware x14 R2](https://agentprime.io/advisories/technology/dell-alienware-x14-r2.md) · [Dell Alienware x16 R1](https://agentprime.io/advisories/technology/dell-alienware-x16-r1.md) · [Dell Alienware X16 R2](https://agentprime.io/advisories/technology/dell-alienware-x16-r2.md) · [Dell ChengMing 3900](https://agentprime.io/advisories/technology/dell-chengming-3900.md) · [Dell ChengMing 3910/3911](https://agentprime.io/advisories/technology/dell-chengming-3910-3911.md) - **Published:** 16 Apr 2026 - **Updated:** 27 May 2026 - **Reviewed by a person:** No Published by the CVE Program (CNA: dell) at 16 Apr 2026, 16:05 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: Dell. Product: Dell Pro 14 Essential PV14250. - affected: `before 1.4.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro Micro / QCM1255. - affected: `before 1.9.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro Slim / QCS1255. - affected: `before 1.9.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro Tower / QCT1255. - affected: `before 1.9.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 16 Area-51 AA16250. - affected: `before 1.9.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 16X Aurora AC16251. - affected: `before 1.8.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 18 Area-51 AA18250. - affected: `before 1.9.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware Area-51 AAT225. - affected: `before 1.11.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware Aurora ACT1250. - affected: `before 1.10.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m15 R6. - affected: `before 1.42.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m15 R7. - affected: `before 1.37.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m16 R1. - affected: `before 1.32.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m16 R2. - affected: `before 1.18.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m18 R1. - affected: `before 1.32.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware M18 R2. - affected: `before 1.20.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware x14 R2. - affected: `before 1.30.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware x16 R1. - affected: `before 1.30.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware X16 R2. - affected: `before 1.18.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3900. - affected: `before 1.37.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3910/3911. - affected: `before 1.32.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3990. - affected: `before 1.35.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3991. - affected: `before 1.35.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 14 DC14250. - affected: `before 1.4.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 14 Premium DA14250. - affected: `before 1.5.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 15 DC15250. - affected: `before 1.6.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 16 DC16250. - affected: `before 1.7.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 16 DC16251. - affected: `before 1.7.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 16 Premium DA16250. - affected: `before 1.7.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G15 5510. - affected: `before 1.38.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G15 5511. - affected: `before 1.41.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G15 5520. - affected: `before 1.38.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G15 5530. - affected: `before 1.30.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G16 7620. - affected: `before 1.38.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G16 7630. - affected: `before 1.30.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell G5 5000. - affected: `before 1.28.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro 13 Plus PB13250. - affected: `before 2.8.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro 13 Plus PB13255. - affected: `before 1.9.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro 13 Premium PA13250. - affected: `before 2.8.1` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro 14 PC14250. - affected: `before 1.10.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell Pro 14 Plus PB14250. - affected: `before 2.8.1` (semver) - Other versions: unaffected And 80 more products. The full list is on the CVE record: ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation - 5.1 Medium, CVSS 3.1: `CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L`, from CNA (dell) - **CISA KEV:** Not listed. - **EPSS:** 0.0018, the 7th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 16 Apr 2026. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2025-36579](https://www.cve.org/CVERecord?id=CVE-2025-36579) - [NVD: CVE-2025-36579](https://nvd.nist.gov/vuln/detail/CVE-2025-36579) ### References from the CNA - (vendor-advisory) Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .