CVE-2026-35159Medium· 5.3▾ Sunlit

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score29/ 100 · Low

impact 29.2 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jul 3, 2026

Updated

Jul 3, 2026

CVSS

5.3

Vendor

Dell

Product

Inspiron 15 3520

CWE

CWE-305

Depth score

29 · Low

EPSS

0.21% · p11

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

CISA SSVC

decided 2026-07-07

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Jul 4.

0.2% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 52 days

Jul 3, 2026Published
Disclosed via NVD
Jul 4, 2026EPSS first tracked
0.2%
Aug 24, 2026EPSS peak
0.2% → 0.2%

Dell CWE-305 #nvd #cve.org

Affected

inspiron_15_3520 < 1.41.0 or later
g15_5530 < 1.33.0 or later
alienware_16_area-51_aa16250 < 2.4.1 or later
alienware_16_aurora_ac16250 < 1.13.0 or later
alienware_16x_aurora_ac16251 < 2.4.0 or later
alienware_18_area-51_aa18250 < 2.4.1 or later
alienware_area-51_aat2250 < 1.17.2 or later
alienware_aurora_act1250 < 1.16.2 or later
alienware_m15_r6 < 1.44.0 or later
alienware_m15_r7 < 1.40.0 or later
alienware_m16_r1 < 1.34.0 or later
alienware_m16_r2 < 1.21.0 or later
alienware_m18_r1 < 1.34.0 or later
alienware_m18_r2 < 1.22.0 or later
alienware_x14_r2 < 1.32.0 or later
alienware_x16_r1 < 1.32.0 or later
alienware_x16_r2 < 1.22.0 or later
chengming_3900 < 1.40.0 or later
chengming_3910_3911 < 1.36.0 or later
14_dc14250 < 1.7.0 or later
14_plus_2-in-1_db04250 < 1.13.0 or later
14_plus_db14250 < 1.13.0 or later
15_dc15250 < 1.10.0 or later
16_plus_2-in-1_db06250 < 1.13.0 or later
16_plus_db16250 < 1.13.0 or later
24_all-in-one_ec24250 < 1.15.0 or later
27_all-in-one_ec27250 < 1.15.0 or later
g15_5510 < 1.40.0 or later
g15_5511 < 1.43.0 or later
g15_5520 < 1.41.0 or later
g16_7620 < 1.41.0 or later
g16_7630 < 1.33.0 or later
pro_13_plus_pb13250 < 2.13.4 or later
pro_13_plus_pb13255 < 1.15.0 or later
pro_13_premium_pa13250 < 2.13.4 or later
pro_14_essential_pv14250 < 1.6.0 or later
pro_14_pc14250 < 1.15.2 or later
pro_14_plus_pb14250 < 2.13.4 or later
pro_14_plus_pb14255 < 1.15.0 or later
pro_14_premium_pa14250 < 2.13.4 or later
pro_16_pc16250 < 1.15.2 or later
pro_16_plus_pb16250 < 2.13.4 or later
pro_16_plus_pb16255 < 1.15.0 or later
pro_24_all-in-one_plus_qb24250_pro_24_all-in-one_qc24250_pro_24_all-in-one_qc24251 < 1.15.1 or later
pro_laptop_pc14250 < 1.15.2 or later
pro_laptop_pc16250 < 1.15.2 or later
pro_max_14_mc14250 < 1.14.1 or later
pro_max_14_mc14255 < 2.4.0 or later
pro_max_16_mc16250 < 1.14.1 or later
pro_max_16_mc16255 < 2.4.0 or later

Full technical detail▾

Overview

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

[email protected] — https://www.dell.com/support/kbdoc/en-us/000452197/dsa-2026-195

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org

← Back to feed

CVE-2026-35159Medium· 5.3▾ Sunlit

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score29/ 100 · Low

impact 29.2 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jul 3, 2026

Updated

Jul 3, 2026

CVSS

5.3

Vendor

Dell

Product

Inspiron 15 3520

CWE

CWE-305

Depth score

29 · Low

EPSS

0.21% · p11

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

CISA SSVC

decided 2026-07-07

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Jul 4.

0.2% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 52 days

Jul 3, 2026Published
Disclosed via NVD
Jul 4, 2026EPSS first tracked
0.2%
Aug 24, 2026EPSS peak
0.2% → 0.2%

Dell CWE-305 #nvd #cve.org

Affected

inspiron_15_3520 < 1.41.0 or later
g15_5530 < 1.33.0 or later
alienware_16_area-51_aa16250 < 2.4.1 or later
alienware_16_aurora_ac16250 < 1.13.0 or later
alienware_16x_aurora_ac16251 < 2.4.0 or later
alienware_18_area-51_aa18250 < 2.4.1 or later
alienware_area-51_aat2250 < 1.17.2 or later
alienware_aurora_act1250 < 1.16.2 or later
alienware_m15_r6 < 1.44.0 or later
alienware_m15_r7 < 1.40.0 or later
alienware_m16_r1 < 1.34.0 or later
alienware_m16_r2 < 1.21.0 or later
alienware_m18_r1 < 1.34.0 or later
alienware_m18_r2 < 1.22.0 or later
alienware_x14_r2 < 1.32.0 or later
alienware_x16_r1 < 1.32.0 or later
alienware_x16_r2 < 1.22.0 or later
chengming_3900 < 1.40.0 or later
chengming_3910_3911 < 1.36.0 or later
14_dc14250 < 1.7.0 or later
14_plus_2-in-1_db04250 < 1.13.0 or later
14_plus_db14250 < 1.13.0 or later
15_dc15250 < 1.10.0 or later
16_plus_2-in-1_db06250 < 1.13.0 or later
16_plus_db16250 < 1.13.0 or later
24_all-in-one_ec24250 < 1.15.0 or later
27_all-in-one_ec27250 < 1.15.0 or later
g15_5510 < 1.40.0 or later
g15_5511 < 1.43.0 or later
g15_5520 < 1.41.0 or later
g16_7620 < 1.41.0 or later
g16_7630 < 1.33.0 or later
pro_13_plus_pb13250 < 2.13.4 or later
pro_13_plus_pb13255 < 1.15.0 or later
pro_13_premium_pa13250 < 2.13.4 or later
pro_14_essential_pv14250 < 1.6.0 or later
pro_14_pc14250 < 1.15.2 or later
pro_14_plus_pb14250 < 2.13.4 or later
pro_14_plus_pb14255 < 1.15.0 or later
pro_14_premium_pa14250 < 2.13.4 or later
pro_16_pc16250 < 1.15.2 or later
pro_16_plus_pb16250 < 2.13.4 or later
pro_16_plus_pb16255 < 1.15.0 or later
pro_24_all-in-one_plus_qb24250_pro_24_all-in-one_qc24250_pro_24_all-in-one_qc24251 < 1.15.1 or later
pro_laptop_pc14250 < 1.15.2 or later
pro_laptop_pc16250 < 1.15.2 or later
pro_max_14_mc14250 < 1.14.1 or later
pro_max_14_mc14255 < 2.4.0 or later
pro_max_16_mc16250 < 1.14.1 or later
pro_max_16_mc16255 < 2.4.0 or later

Full technical detail▾

Overview

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

[email protected] — https://www.dell.com/support/kbdoc/en-us/000452197/dsa-2026-195

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org