CVE-2026-40639

MediumCVSS 5.7

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this to achieve Elevation of Privileges.

Risk Assessment

An attacker with physical access could gain elevated privileges, potentially leading to full system compromise.

Recommendation

Update the BIOS to the latest version provided by Dell.

Other vulnerabilities in Dell Client Platform BIOS

CVE-2026-35159Medium
A vulnerability in Dell Client Platform BIOS allows authentication bypass due to a primary weakness. An unauthenticated attacker with physical access could potentially exploit this flaw, leading to information disclosure.

Original NVD description (English source)

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS