CVE-2026-40639
Medium
Description
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
SeverityMedium
CVSS5.7
Exploit probability—
ProductDell Edge Gateway 3000
PublishedJun 9, 2026
First seenJun 9, 2026
Weakness typeCWE-261CWE-261
How to fix
Update
- Dell Dell Edge Gateway 30001.26.0 or later
- Dell Dell Edge Gateway 50001.36.0 or later
- Dell DELL EMBEDDED PC 30001.32.0 or later
- Dell DELL EMBEDDED PC 50001.33.0 or later
- Dell Dell Precision 3630 Tower2.40.0 or later
- Dell Dell Precision 3930 Rack2.43.0 or later
- Dell Latitude 7220 Rugged Extreme1.51.0 or later
- Dell Latitude Rugged 54201.42.0 or later
- Dell Latitude Rugged 54241.42.0 or later
- Dell Latitude Rugged 7220EX1.51.0 or later
- Dell Latitude Rugged 74241.42.0 or later
- Dell Precision 3930 Rack2.43.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Dell Edge Gateway 3000 | v < 1.26.0 | 1.26.0 |
| Dell Dell Edge Gateway 5000 | v < 1.36.0 | 1.36.0 |
| Dell DELL EMBEDDED PC 3000 | v < 1.32.0 | 1.32.0 |
| Dell DELL EMBEDDED PC 5000 | v < 1.33.0 | 1.33.0 |
| Dell Dell Precision 3630 Tower | v < 2.40.0 | 2.40.0 |
| Dell Dell Precision 3930 Rack | v < 2.43.0 | 2.43.0 |
| Dell Latitude 7220 Rugged Extreme | v < 1.51.0 | 1.51.0 |
| Dell Latitude Rugged 5420 | v < 1.42.0 | 1.42.0 |
| Dell Latitude Rugged 5424 | v < 1.42.0 | 1.42.0 |
| Dell Latitude Rugged 7220EX | v < 1.51.0 | 1.51.0 |
| Dell Latitude Rugged 7424 | v < 1.42.0 | 1.42.0 |
| Dell Precision 3930 Rack | v < 2.43.0 | 2.43.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.