CVE-2026-35159: Dell 14 Plus 2-In-1 DB04250

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected products

• Dell 14 Plus 2-In-1 DB04250
• Dell 14 Plus DB14250
• Dell 15 DC15250
• Dell 16 Plus 2-In-1 DB06250
• Dell 16 Plus DB16250
• Dell 24 All-In-One EC24250
• Dell 27 All-In-One EC27250
• Dell Alienware 16 Area-51 AA16250
• Dell Alienware 16 Aurora AC16250
• Dell Alienware 16x Aurora AC16251
• Dell Alienware 18 Area-51 AA18250
• Dell Alienware Area-51 AAT2250
• Dell Alienware Aurora ACT1250
• Dell Alienware m15 r6
• Dell Alienware m15 r7
• Dell Alienware m16 r1
• Dell Alienware m16 r2
• Dell Alienware m18 r1
• Dell Alienware m18 r2
• Dell Alienware x14 r2
• Dell Alienware x16 r1
• Dell Alienware x16 r2
• Dell Chengming 3900
• Dell Chengming 3910/3911
• Dell Dell 14 DC14250
• and 205 more

Published 2026-07-03. Last modified 2026-07-07.