Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2025-36579

Weak password recovery in Dell Pro 14 Essential PV14250 and others

CVSS 5.1 MediumEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: dell) at 16 Apr 2026, 16:05 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Dell Dell Pro 14 Essential PV14250
  • affected before 1.4.0 semver
Other versions: unaffected
Dell Dell Pro Micro / QCM1255
  • affected before 1.9.1 semver
Other versions: unaffected
Dell Dell Pro Slim / QCS1255
  • affected before 1.9.1 semver
Other versions: unaffected
Dell Dell Pro Tower / QCT1255
  • affected before 1.9.1 semver
Other versions: unaffected
Dell Alienware 16 Area-51 AA16250
  • affected before 1.9.0 semver
Other versions: unaffected
Dell Alienware 16X Aurora AC16251
  • affected before 1.8.1 semver
Other versions: unaffected
Dell Alienware 18 Area-51 AA18250
  • affected before 1.9.0 semver
Other versions: unaffected
Dell Alienware Area-51 AAT225
  • affected before 1.11.0 semver
Other versions: unaffected
Dell Alienware Aurora ACT1250
  • affected before 1.10.0 semver
Other versions: unaffected
Dell Alienware m15 R6
  • affected before 1.42.0 semver
Other versions: unaffected
Dell Alienware m15 R7
  • affected before 1.37.0 semver
Other versions: unaffected
Dell Alienware m16 R1
  • affected before 1.32.0 semver
Other versions: unaffected
Dell Alienware m16 R2
  • affected before 1.18.0 semver
Other versions: unaffected
Dell Alienware m18 R1
  • affected before 1.32.0 semver
Other versions: unaffected
Dell Alienware M18 R2
  • affected before 1.20.0 semver
Other versions: unaffected
Dell Alienware x14 R2
  • affected before 1.30.1 semver
Other versions: unaffected
Dell Alienware x16 R1
  • affected before 1.30.1 semver
Other versions: unaffected
Dell Alienware X16 R2
  • affected before 1.18.1 semver
Other versions: unaffected
Dell ChengMing 3900
  • affected before 1.37.0 semver
Other versions: unaffected
Dell ChengMing 3910/3911
  • affected before 1.32.0 semver
Other versions: unaffected
Dell ChengMing 3990
  • affected before 1.35.1 semver
Other versions: unaffected
Dell ChengMing 3991
  • affected before 1.35.1 semver
Other versions: unaffected
Dell Dell 14 DC14250
  • affected before 1.4.0 semver
Other versions: unaffected
Dell Dell 14 Premium DA14250
  • affected before 1.5.1 semver
Other versions: unaffected
Dell Dell 15 DC15250
  • affected before 1.6.0 semver
Other versions: unaffected
Dell Dell 16 DC16250
  • affected before 1.7.0 semver
Other versions: unaffected
Dell Dell 16 DC16251
  • affected before 1.7.0 semver
Other versions: unaffected
Dell Dell 16 Premium DA16250
  • affected before 1.7.0 semver
Other versions: unaffected
Dell Dell G15 5510
  • affected before 1.38.0 semver
Other versions: unaffected
Dell Dell G15 5511
  • affected before 1.41.0 semver
Other versions: unaffected
Dell Dell G15 5520
  • affected before 1.38.0 semver
Other versions: unaffected
Dell Dell G15 5530
  • affected before 1.30.0 semver
Other versions: unaffected
Dell Dell G16 7620
  • affected before 1.38.0 semver
Other versions: unaffected
Dell Dell G16 7630
  • affected before 1.30.0 semver
Other versions: unaffected
Dell Dell G5 5000
  • affected before 1.28.2 semver
Other versions: unaffected
Dell Dell Pro 13 Plus PB13250
  • affected before 2.8.1 semver
Other versions: unaffected
Dell Dell Pro 13 Plus PB13255
  • affected before 1.9.1 semver
Other versions: unaffected
Dell Dell Pro 13 Premium PA13250
  • affected before 2.8.1 semver
Other versions: unaffected
Dell Dell Pro 14 PC14250
  • affected before 1.10.2 semver
Other versions: unaffected
Dell Dell Pro 14 Plus PB14250
  • affected before 2.8.1 semver
Other versions: unaffected

And 80 more products. The full list is on the CVE record.

Identifiers
CVE-2025-36579
CNA
dell
Weakness (CWE)
CWE-640
Tags
Published
16 Apr 2026
Updated
27 May 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.1 Medium 3.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CNA (dell)
  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Apr 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.