01 Record

CVE-2026-35159

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to

MediumPUBLISHEDCNA: dell

CNA base score5.3 CVSS v3.xCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.20% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 10.4% of scored records. A rank, not a probability.

NVD base score

5.3 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-07-07.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-03 08:08Z3 MO AGO

Last updated

2026-09-17 18:37Z1 MO AGO

Reserved

2026-04-01

Assigning CNA

dell

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CNA CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

Weaknesses

CWE-305Authentication Bypass by Primary WeaknessBase

Data version

5.2

Document digest

7fe85f8cdc3866fee8c7624ca22643bb1a92da9d0e80426eab74c88d31df3986

05 Affected products

VendorProductVersionsPlatforms

DellInspiron 15 35200 to < 1.41.0 or later—

DellG15 55300 to < 1.33.0 or later—

DellAlienware 16 Area-51 AA162500 to < 2.4.1 or later—

DellAlienware 16 Aurora AC162500 to < 1.13.0 or later—

DellAlienware 16X Aurora AC162510 to < 2.4.0 or later—

DellAlienware 18 Area-51 AA182500 to < 2.4.1 or later—

DellAlienware Area-51 AAT22500 to < 1.17.2 or later—

DellAlienware Aurora ACT12500 to < 1.16.2 or later—

DellAlienware m15 R60 to < 1.44.0 or later—

DellAlienware m15 R70 to < 1.40.0 or later—

DellAlienware m16 R10 to < 1.34.0 or later—

DellAlienware m16 R20 to < 1.21.0 or later—

DellAlienware m18 R10 to < 1.34.0 or later—

DellAlienware M18 R20 to < 1.22.0 or later—

DellAlienware x14 R20 to < 1.32.0 or later—

DellAlienware x16 R10 to < 1.32.0 or later—

DellAlienware X16 R20 to < 1.22.0 or later—

DellChengMing 39000 to < 1.40.0 or later—

DellChengMing 3910/39110 to < 1.36.0 or later—

DellDell 14 DC142500 to < 1.7.0 or later—

Dell14 Plus 2-in-1 DB042500 to < 1.13.0 or later—

Dell14 Plus DB142500 to < 1.13.0 or later—

Dell15 DC152500 to < 1.10.0 or later—

Dell16 Plus 2-in-1 DB062500 to < 1.13.0 or later—

Dell16 Plus DB162500 to < 1.13.0 or later—

Dell24 All-in-One EC242500 to < 1.15.0 or later—

Dell27 All-in-One EC272500 to < 1.15.0 or later—

DellG15 55100 to < 1.40.0 or later—

DellG15 55110 to < 1.43.0 or later—

DellG15 55200 to < 1.41.0 or later—

DellG16 76200 to < 1.41.0 or later—

DellG16 76300 to < 1.33.0 or later—

DellPro 13 Plus PB132500 to < 2.13.4 or later—

DellPro 13 Plus PB132550 to < 1.15.0 or later—

DellPro 13 Premium PA132500 to < 2.13.4 or later—

DellPro 14 Essential PV142500 to < 1.6.0 or later—

DellPro 14 PC142500 to < 1.15.2 or later—

DellPro 14 Plus PB142500 to < 2.13.4 or later—

DellPro 14 Plus PB142550 to < 1.15.0 or later—

DellPro 14 Premium PA142500 to < 2.13.4 or later—

DellPro 16 PC162500 to < 1.15.2 or later—

DellPro 16 Plus PB162500 to < 2.13.4 or later—

DellPro 16 Plus PB162550 to < 1.15.0 or later—

DellPro 24 All-In-One Plus QB24250 / Pro 24 All-In-One QC24250 / Pro 24 All-In-One QC242510 to < 1.15.1 or later—

DellPro Laptop PC142500 to < 1.15.2 or later—

DellPro Laptop PC162500 to < 1.15.2 or later—

DellPro Max 14 MC142500 to < 1.14.1 or later—

DellPro Max 14 MC142550 to < 2.4.0 or later—

DellPro Max 16 MC162500 to < 1.14.1 or later—

DellPro Max 16 MC162550 to < 2.4.0 or later—

DellPro Max Micro FCM22500 to < 1.15.2 or later—

DellPro Max Slim FCS12500 to < 1.15.2 or later—

DellPro Max Tower T2 FCT22500 to < 1.15.2 or later—

DellPro Micro / QCM12550 to < 1.13.0 or later—

DellPro Micro Plus QBM1250 / Pro Micro QCM12500 to < 1.15.1 or later—

DellPro Micro/Micro Plus QCM1250/QBM12500 to < 1.15.1 or later—

DellPro Precision 7 T10 to < 1.15.1 or later—

DellPro Rugged 10 Tablets0 to < 1.9.0 or later—

DellPro Rugged 12 Tablet0 to < 1.9.0 or later—

DellPro Rugged 13 RA132500 to < 1.16.1 or later—

140 further entries not shown. The complete list is in the raw JSON document.

06 References

www.dell.comhttps://www.dell.com/support/kbdoc/en-us/000452197/dsa-2026-195vendor-advisory