Log in Start free

Vulnerability · Published Jul 3, 2026 · Assigned by dell

CVE-2026-35159

Medium 5.3

In plain English

A medium-severity security flaw in 14 Plus 2-in-1 DB04250 from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected products (as reported)

VendorProductVersions
Dell Inspiron 15 3520 0 – before 1.41.0 or later
Dell G15 5530 0 – before 1.33.0 or later
Dell Alienware 16 Area-51 AA16250 0 – before 2.4.1 or later
Dell Alienware 16 Aurora AC16250 0 – before 1.13.0 or later
Dell Alienware 16X Aurora AC16251 0 – before 2.4.0 or later
Dell Alienware 18 Area-51 AA18250 0 – before 2.4.1 or later
Dell Alienware Area-51 AAT2250 0 – before 1.17.2 or later
Dell Alienware Aurora ACT1250 0 – before 1.16.2 or later
Dell Alienware m15 R6 0 – before 1.44.0 or later
Dell Alienware m15 R7 0 – before 1.40.0 or later
Dell Alienware m16 R1 0 – before 1.34.0 or later
Dell Alienware m16 R2 0 – before 1.21.0 or later
Dell Alienware m18 R1 0 – before 1.34.0 or later
Dell Alienware M18 R2 0 – before 1.22.0 or later
Dell Alienware x14 R2 0 – before 1.32.0 or later
Dell Alienware x16 R1 0 – before 1.32.0 or later
Dell Alienware X16 R2 0 – before 1.22.0 or later
Dell ChengMing 3900 0 – before 1.40.0 or later
Dell ChengMing 3910/3911 0 – before 1.36.0 or later
Dell Dell 14 DC14250 0 – before 1.7.0 or later
Dell 14 Plus 2-in-1 DB04250 0 – before 1.13.0 or later
Dell 14 Plus DB14250 0 – before 1.13.0 or later
Dell 15 DC15250 0 – before 1.10.0 or later
Dell 16 Plus 2-in-1 DB06250 0 – before 1.13.0 or later
Dell 16 Plus DB16250 0 – before 1.13.0 or later
Dell 24 All-in-One EC24250 0 – before 1.15.0 or later
Dell 27 All-in-One EC27250 0 – before 1.15.0 or later
Dell G15 5510 0 – before 1.40.0 or later
Dell G15 5511 0 – before 1.43.0 or later
Dell G15 5520 0 – before 1.41.0 or later

Weakness: CWE-305 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

References