Vulnerability · Published Jun 9, 2026 · Assigned by dell
CVE-2026-40639
Medium 5.7
In plain English
A medium-severity security flaw in Dell Edge Gateway 3000 from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Edge Gateway 3000 | 0 – before 1.26.0 |
| Dell | Dell Edge Gateway 5000 | 0 – before 1.36.0 |
| Dell | DELL EMBEDDED PC 3000 | 0 – before 1.32.0 |
| Dell | DELL EMBEDDED PC 5000 | 0 – before 1.33.0 |
| Dell | Dell Precision 3630 Tower | 0 – before 2.40.0 |
| Dell | Dell Precision 3930 Rack | 0 – before 2.43.0 |
| Dell | Latitude 7220 Rugged Extreme | 0 – before 1.51.0 |
| Dell | Latitude Rugged 5420 | 0 – before 1.42.0 |
| Dell | Latitude Rugged 5424 | 0 – before 1.42.0 |
| Dell | Latitude Rugged 7220EX | 0 – before 1.51.0 |
| Dell | Latitude Rugged 7424 | 0 – before 1.42.0 |
| Dell | Precision 3930 Rack | 0 – before 2.43.0 |
Weakness: CWE-261 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
References
- https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197 vendor-advisory