CVE-2026-40639

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Score

CVSS 3.1 5.7 Medium

Status

Awaiting Analysis - security_alert@emc.com

Published

2026-06-09

Last modified

2026-06-09

Weaknesses

CWE-261

Affected products

• Dell Edge Gateway 3000 (Dell)
• Dell Edge Gateway 5000 (Dell)
• Dell Embedded Pc 3000 (Dell)
• Dell Embedded Pc 5000 (Dell)
• Dell Precision 3630 Tower (Dell)
• Dell Precision 3930 Rack (Dell)
• Latitude 7220 Rugged Extreme (Dell)
• Latitude Rugged 5420 (Dell)
• Latitude Rugged 5424 (Dell)
• Latitude Rugged 7220ex (Dell)
• Latitude Rugged 7424 (Dell)
• Precision 3930 Rack (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197