Skip to content
Fencer Vulns
medium 5.3

CVE-2026-35159 json

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability.

published 2026-07-03 4 mo ago modified 2026-09-17 52 d ago also EUVD-2026-41525

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 10%
public exploits
0
none known

Summary

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Patch / fix

  • Dell Inspiron 15 3520 1.41.0 or later
  • Dell G15 5530 1.33.0 or later
  • Dell Alienware 16 Area-51 AA16250 2.4.1 or later
  • Dell Alienware 16 Aurora AC16250 1.13.0 or later
  • Dell Alienware 16X Aurora AC16251 2.4.0 or later
  • Dell Alienware 18 Area-51 AA18250 2.4.1 or later
  • Dell Alienware Area-51 AAT2250 1.17.2 or later
  • Dell Alienware Aurora ACT1250 1.16.2 or later
  • Dell Alienware m15 R6 1.44.0 or later
  • Dell Alienware m15 R7 1.40.0 or later
  • Dell Alienware m16 R1 1.34.0 or later
  • Dell Alienware m16 R2 1.21.0 or later
  • Dell Alienware m18 R1 1.34.0 or later
  • Dell Alienware M18 R2 1.22.0 or later
  • Dell Alienware x14 R2 1.32.0 or later
  • Dell Alienware x16 R1 1.32.0 or later
  • Dell Alienware X16 R2 1.22.0 or later
  • Dell ChengMing 3900 1.40.0 or later
  • Dell ChengMing 3910/3911 1.36.0 or later
  • Dell Dell 14 DC14250 1.7.0 or later
  • Dell 14 Plus 2-in-1 DB04250 1.13.0 or later
  • Dell 14 Plus DB14250 1.13.0 or later
  • Dell 15 DC15250 1.10.0 or later
  • Dell 16 Plus 2-in-1 DB06250 1.13.0 or later
  • Dell 16 Plus DB16250 1.13.0 or later
  • Dell 24 All-in-One EC24250 1.15.0 or later
  • Dell 27 All-in-One EC27250 1.15.0 or later
  • Dell G15 5510 1.40.0 or later
  • Dell G15 5511 1.43.0 or later
  • Dell G15 5520 1.41.0 or later

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
4 mo ago

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 10% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

Affected products

  • Dell Inspiron 15 3520
  • Dell G15 5530
  • Dell Alienware 16 Area-51 AA16250
  • Dell Alienware 16 Aurora AC16250
  • Dell Alienware 16X Aurora AC16251
  • Dell Alienware 18 Area-51 AA18250
  • Dell Alienware Area-51 AAT2250
  • Dell Alienware Aurora ACT1250
  • Dell Alienware m15 R6
  • Dell Alienware m15 R7
  • Dell Alienware m16 R1
  • Dell Alienware m16 R2
  • Dell Alienware m18 R1
  • Dell Alienware M18 R2
  • Dell Alienware x14 R2
  • Dell Alienware x16 R1
  • Dell Alienware X16 R2
  • Dell ChengMing 3900
  • Dell ChengMing 3910/3911
  • Dell Dell 14 DC14250
  • Dell 14 Plus 2-in-1 DB04250
  • Dell 14 Plus DB14250
  • Dell 15 DC15250
  • Dell 16 Plus 2-in-1 DB06250
  • Dell 16 Plus DB16250
  • Dell 24 All-in-One EC24250
  • Dell 27 All-in-One EC27250
  • Dell G15 5510
  • Dell G15 5511
  • Dell G15 5520
  • Dell G16 7620
  • Dell G16 7630
  • Dell Pro 13 Plus PB13250
  • Dell Pro 13 Plus PB13255
  • Dell Pro 13 Premium PA13250
  • Dell Pro 14 Essential PV14250
  • Dell Pro 14 PC14250
  • Dell Pro 14 Plus PB14250
  • Dell Pro 14 Plus PB14255
  • Dell Pro 14 Premium PA14250
  • Dell Pro 16 PC16250
  • Dell Pro 16 Plus PB16250
  • Dell Pro 16 Plus PB16255
  • Dell Pro 24 All-In-One Plus QB24250 / Pro 24 All-In-One QC24250 / Pro 24 All-In-One QC24251
  • Dell Pro Laptop PC14250
  • Dell Pro Laptop PC16250
  • Dell Pro Max 14 MC14250
  • Dell Pro Max 14 MC14255
  • Dell Pro Max 16 MC16250
  • Dell Pro Max 16 MC16255

Classification

Weakness
  • CWE-305 Authentication Bypass by Primary Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.