CVE-2026-40639: Dell Edge Gateway 3000

Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Affected products

• Dell Dell Edge Gateway 3000: before 1.26.0 (fixed in 1.26.0)
• Dell Dell Edge Gateway 5000: before 1.36.0 (fixed in 1.36.0)
• Dell Dell Embedded Pc 3000: before 1.32.0 (fixed in 1.32.0)
• Dell Dell Embedded Pc 5000: before 1.33.0 (fixed in 1.33.0)
• Dell Dell Precision 3630 Tower: before 2.40.0 (fixed in 2.40.0)
• Dell Dell Precision 3930 Rack: before 2.43.0 (fixed in 2.43.0)
• Dell Latitude 7220 Rugged Extreme: before 1.51.0 (fixed in 1.51.0)
• Dell Latitude Rugged 5420: before 1.42.0 (fixed in 1.42.0)
• Dell Latitude Rugged 5424: before 1.42.0 (fixed in 1.42.0)
• Dell Latitude Rugged 7220ex: before 1.51.0 (fixed in 1.51.0)
• Dell Latitude Rugged 7424: before 1.42.0 (fixed in 1.42.0)
• Dell Precision 3930 Rack: before 2.43.0 (fixed in 2.43.0)

Published 2026-06-09. Last modified 2026-07-23.