# Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. CVE record · `CVE-2026-35159` - **Identifiers:** `CVE-2026-35159` - **State:** Confirmed - **Severity:** CVSS 5.3 Medium - **Critical:** No - **CNA:** dell - **Weakness (CWE):** [CWE-305](https://cwe.mitre.org/data/definitions/305.html) - **Tags:** [CWE-305](https://agentprime.io/advisories/tag/cwe-305.md) - **Technologies:** [Dell Inspiron 15 3520](https://agentprime.io/advisories/technology/dell-inspiron-15-3520.md) · [Dell G15 5530](https://agentprime.io/advisories/technology/dell-g15-5530.md) · [Dell Alienware 16 Area-51 AA16250](https://agentprime.io/advisories/technology/dell-alienware-16-area-51-aa16250.md) · [Dell Alienware 16 Aurora AC16250](https://agentprime.io/advisories/technology/dell-alienware-16-aurora-ac16250.md) · [Dell Alienware 16X Aurora AC16251](https://agentprime.io/advisories/technology/dell-alienware-16x-aurora-ac16251.md) · [Dell Alienware 18 Area-51 AA18250](https://agentprime.io/advisories/technology/dell-alienware-18-area-51-aa18250.md) · [Dell Alienware Area-51 AAT2250](https://agentprime.io/advisories/technology/dell-alienware-area-51-aat2250.md) · [Dell Alienware Aurora ACT1250](https://agentprime.io/advisories/technology/dell-alienware-aurora-act1250.md) · [Dell Alienware m15 R6](https://agentprime.io/advisories/technology/dell-alienware-m15-r6.md) · [Dell Alienware m15 R7](https://agentprime.io/advisories/technology/dell-alienware-m15-r7.md) · [Dell Alienware m16 R1](https://agentprime.io/advisories/technology/dell-alienware-m16-r1.md) · [Dell Alienware m16 R2](https://agentprime.io/advisories/technology/dell-alienware-m16-r2.md) · [Dell Alienware m18 R1](https://agentprime.io/advisories/technology/dell-alienware-m18-r1.md) · [Dell Alienware M18 R2](https://agentprime.io/advisories/technology/dell-alienware-m18-r2.md) · [Dell Alienware x14 R2](https://agentprime.io/advisories/technology/dell-alienware-x14-r2.md) · [Dell Alienware x16 R1](https://agentprime.io/advisories/technology/dell-alienware-x16-r1.md) · [Dell Alienware X16 R2](https://agentprime.io/advisories/technology/dell-alienware-x16-r2.md) · [Dell ChengMing 3900](https://agentprime.io/advisories/technology/dell-chengming-3900.md) · [Dell ChengMing 3910/3911](https://agentprime.io/advisories/technology/dell-chengming-3910-3911.md) · [Dell 14 DC14250](https://agentprime.io/advisories/technology/dell-14-dc14250.md) - **Published:** 3 Jul 2026 - **Updated:** 17 Sept 2026 - **Reviewed by a person:** No Published by the CVE Program (CNA: dell) at 3 Jul 2026, 08:08 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: Dell. Product: Inspiron 15 3520. - affected: `before 1.41.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G15 5530. - affected: `before 1.33.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 16 Area-51 AA16250. - affected: `before 2.4.1 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 16 Aurora AC16250. - affected: `before 1.13.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 16X Aurora AC16251. - affected: `before 2.4.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware 18 Area-51 AA18250. - affected: `before 2.4.1 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware Area-51 AAT2250. - affected: `before 1.17.2 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware Aurora ACT1250. - affected: `before 1.16.2 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m15 R6. - affected: `before 1.44.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m15 R7. - affected: `before 1.40.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m16 R1. - affected: `before 1.34.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m16 R2. - affected: `before 1.21.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware m18 R1. - affected: `before 1.34.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware M18 R2. - affected: `before 1.22.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware x14 R2. - affected: `before 1.32.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware x16 R1. - affected: `before 1.32.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Alienware X16 R2. - affected: `before 1.22.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3900. - affected: `before 1.40.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: ChengMing 3910/3911. - affected: `before 1.36.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Dell 14 DC14250. - affected: `before 1.7.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 14 Plus 2-in-1 DB04250. - affected: `before 1.13.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 14 Plus DB14250. - affected: `before 1.13.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 15 DC15250. - affected: `before 1.10.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 16 Plus 2-in-1 DB06250. - affected: `before 1.13.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 16 Plus DB16250. - affected: `before 1.13.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 24 All-in-One EC24250. - affected: `before 1.15.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: 27 All-in-One EC27250. - affected: `before 1.15.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G15 5510. - affected: `before 1.40.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G15 5511. - affected: `before 1.43.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G15 5520. - affected: `before 1.41.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G16 7620. - affected: `before 1.41.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: G16 7630. - affected: `before 1.33.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 13 Plus PB13250. - affected: `before 2.13.4 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 13 Plus PB13255. - affected: `before 1.15.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 13 Premium PA13250. - affected: `before 2.13.4 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 14 Essential PV14250. - affected: `before 1.6.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 14 PC14250. - affected: `before 1.15.2 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 14 Plus PB14250. - affected: `before 2.13.4 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 14 Plus PB14255. - affected: `before 1.15.0 or later` (semver) - Other versions: unaffected - Vendor: Dell. Product: Pro 14 Premium PA14250. - affected: `before 2.13.4 or later` (semver) - Other versions: unaffected And 190 more products. The full list is on the CVE record: ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation - 5.3 Medium, CVSS 3.1: `CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L`, from CNA (dell) - **CISA KEV:** Not listed. - **EPSS:** 0.0021, the 10th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 3 Jul 2026. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2026-35159](https://www.cve.org/CVERecord?id=CVE-2026-35159) - [NVD: CVE-2026-35159](https://nvd.nist.gov/vuln/detail/CVE-2026-35159) ### References from the CNA - (vendor-advisory) Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .