CVE-2026-40639

MEDIUM

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVSS v3.1 Score

5.7
MEDIUM
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
PHYSICAL
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Published: 6/9/2026Modified: 6/17/2026

Related Intelligence (1)

LOWVulnerability

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

[object Object]

CVE-2026-40639
r/blueteamsec

References (1)

https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197