Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-35159

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability.

CVSS 5.3 MediumEPSS 0.0021 · 10th percentile

Published by the CVE Program (CNA: dell) at 3 Jul 2026, 08:08 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Dell Inspiron 15 3520
  • affected before 1.41.0 or later semver
Other versions: unaffected
Dell G15 5530
  • affected before 1.33.0 or later semver
Other versions: unaffected
Dell Alienware 16 Area-51 AA16250
  • affected before 2.4.1 or later semver
Other versions: unaffected
Dell Alienware 16 Aurora AC16250
  • affected before 1.13.0 or later semver
Other versions: unaffected
Dell Alienware 16X Aurora AC16251
  • affected before 2.4.0 or later semver
Other versions: unaffected
Dell Alienware 18 Area-51 AA18250
  • affected before 2.4.1 or later semver
Other versions: unaffected
Dell Alienware Area-51 AAT2250
  • affected before 1.17.2 or later semver
Other versions: unaffected
Dell Alienware Aurora ACT1250
  • affected before 1.16.2 or later semver
Other versions: unaffected
Dell Alienware m15 R6
  • affected before 1.44.0 or later semver
Other versions: unaffected
Dell Alienware m15 R7
  • affected before 1.40.0 or later semver
Other versions: unaffected
Dell Alienware m16 R1
  • affected before 1.34.0 or later semver
Other versions: unaffected
Dell Alienware m16 R2
  • affected before 1.21.0 or later semver
Other versions: unaffected
Dell Alienware m18 R1
  • affected before 1.34.0 or later semver
Other versions: unaffected
Dell Alienware M18 R2
  • affected before 1.22.0 or later semver
Other versions: unaffected
Dell Alienware x14 R2
  • affected before 1.32.0 or later semver
Other versions: unaffected
Dell Alienware x16 R1
  • affected before 1.32.0 or later semver
Other versions: unaffected
Dell Alienware X16 R2
  • affected before 1.22.0 or later semver
Other versions: unaffected
Dell ChengMing 3900
  • affected before 1.40.0 or later semver
Other versions: unaffected
Dell ChengMing 3910/3911
  • affected before 1.36.0 or later semver
Other versions: unaffected
Dell Dell 14 DC14250
  • affected before 1.7.0 or later semver
Other versions: unaffected
Dell 14 Plus 2-in-1 DB04250
  • affected before 1.13.0 or later semver
Other versions: unaffected
Dell 14 Plus DB14250
  • affected before 1.13.0 or later semver
Other versions: unaffected
Dell 15 DC15250
  • affected before 1.10.0 or later semver
Other versions: unaffected
Dell 16 Plus 2-in-1 DB06250
  • affected before 1.13.0 or later semver
Other versions: unaffected
Dell 16 Plus DB16250
  • affected before 1.13.0 or later semver
Other versions: unaffected
Dell 24 All-in-One EC24250
  • affected before 1.15.0 or later semver
Other versions: unaffected
Dell 27 All-in-One EC27250
  • affected before 1.15.0 or later semver
Other versions: unaffected
Dell G15 5510
  • affected before 1.40.0 or later semver
Other versions: unaffected
Dell G15 5511
  • affected before 1.43.0 or later semver
Other versions: unaffected
Dell G15 5520
  • affected before 1.41.0 or later semver
Other versions: unaffected
Dell G16 7620
  • affected before 1.41.0 or later semver
Other versions: unaffected
Dell G16 7630
  • affected before 1.33.0 or later semver
Other versions: unaffected
Dell Pro 13 Plus PB13250
  • affected before 2.13.4 or later semver
Other versions: unaffected
Dell Pro 13 Plus PB13255
  • affected before 1.15.0 or later semver
Other versions: unaffected
Dell Pro 13 Premium PA13250
  • affected before 2.13.4 or later semver
Other versions: unaffected
Dell Pro 14 Essential PV14250
  • affected before 1.6.0 or later semver
Other versions: unaffected
Dell Pro 14 PC14250
  • affected before 1.15.2 or later semver
Other versions: unaffected
Dell Pro 14 Plus PB14250
  • affected before 2.13.4 or later semver
Other versions: unaffected
Dell Pro 14 Plus PB14255
  • affected before 1.15.0 or later semver
Other versions: unaffected
Dell Pro 14 Premium PA14250
  • affected before 2.13.4 or later semver
Other versions: unaffected

And 190 more products. The full list is on the CVE record.

Identifiers
CVE-2026-35159
CNA
dell
Weakness (CWE)
CWE-305
Tags
Published
3 Jul 2026
Updated
17 Sept 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.3 Medium 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CNA (dell)
  • CISA KEV Not listed.
  • EPSS 0.0021, the 10th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 3 Jul 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.