CVE-2022-26858: Dell Alienware m15 r6 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.

Affected products

• Dell Alienware m15 r6 Firmware: before 1.8.0 (fixed in 1.8.0)
• Dell Chengming 3980 Firmware: before 2.21.0 (fixed in 2.21.0)
• Dell Chengming 3988 Firmware: before 1.9.0 (fixed in 1.9.0)
• Dell Chengming 3990 Firmware: before 1.8.2 (fixed in 1.8.2)
• Dell Chengming 3991 Firmware: before 1.8.2 (fixed in 1.8.2)
• Dell Edge Gateway 3000 Firmware: before 1.8.0 (fixed in 1.8.0)
• Dell Edge Gateway 5000 Firmware: before 1.18.0 (fixed in 1.18.0)
• Dell Embedded Box Pc 3000 Firmware: before 1.14.0 (fixed in 1.14.0)
• Dell Embedded Box Pc 5000 Firmware: before 1.15.0 (fixed in 1.15.0)
• Dell g15 5510 Firmware: before 1.8.0 (fixed in 1.8.0)
• Dell g15 5511 Firmware: before 1.9.0 (fixed in 1.9.0)
• Dell g3 15 3590 Firmware: before 1.16.0 (fixed in 1.16.0)
• Dell g3 3500 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g3 3579 Firmware: before 1.19.0 (fixed in 1.19.0)
• Dell g5 15 5587 Firmware: before 1.19.0 (fixed in 1.19.0)
• Dell g5 15 5590 Firmware: before 1.18.0 (fixed in 1.18.0)
• Dell g5 5000 Firmware: before 1.5.1 (fixed in 1.5.1)
• Dell g5 5090 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g5 5500 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g7 17 7700 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g7 17 7790 Firmware: before 1.18.0 (fixed in 1.18.0)
• Dell g7 7500 Firmware: before 1.12.0 (fixed in 1.12.0)
• Dell g7 7588 Firmware: before 1.19.0 (fixed in 1.19.0)
• Dell Inspiron 13 5378 Firmware: before 1.36.0 (fixed in 1.36.0)
• Dell Inspiron 13 5379 Firmware: before 1.19.0 (fixed in 1.19.0)
• and 374 more

Published 2022-09-06. Last modified 2026-06-17.