Dell TechnologiesCVE-2026-35159
Dell Technologies Alienware 16 Area-51 AA16250: authentication bypass
Medium5.3CVE-2026-35159 · Published Jul 3, 2026 · updated Jul 7, 2026
Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Alienware 16 Area-51 AA16250 Product | < 2.4.1 or later | 2.4.1 or later |
| Alienware 16 Aurora AC16250 Product | < 1.13.0 or later | 1.13.0 or later |
| Alienware 16X Aurora AC16251 Product | < 2.4.0 or later | 2.4.0 or later |
| Alienware 18 Area-51 AA18250 Product | < 2.4.1 or later | 2.4.1 or later |
| Alienware Area-51 AAT2250 Product | < 1.17.2 or later | 1.17.2 or later |
| Alienware Aurora ACT1250 Product | < 1.16.2 or later | 1.16.2 or later |
| Alienware m15 R6 Product | < 1.44.0 or later | 1.44.0 or later |
| Alienware m15 R7 Product | < 1.40.0 or later | 1.40.0 or later |
| Alienware m16 R1 Product | < 1.34.0 or later | 1.34.0 or later |
| Alienware m16 R2 Product | < 1.21.0 or later | 1.21.0 or later |
| G15 5530 Product | < 1.33.0 or later | 1.33.0 or later |
| Inspiron 15 3520 Product | < 1.41.0 or later | 1.41.0 or later |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-305
More Dell Technologies advisories
All Dell Technologies| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 3 | Dell Technologies PowerProtect Data Domain: command injection | Medium6.7 | 8.8.0.0 or later+3 more |
| Jul 3 | Dell Technologies PowerProtect Data Domain: command injection | High7.2 | 8.8.0.0 or later+3 more |
| Jul 3 | Dell Technologies PowerProtect Data Domain: command injection | High7.2 | 8.8.0.0 or later+3 more |
| Jul 3 | Dell Technologies PowerProtect Data Domain: command injection | High7.2 | No fix yet |
| Jul 3 | Dell Technologies PowerProtect Data Domain: information disclosure | Medium4.9 | 8.8.0.0 or later+3 more |
| Jul 3 | Dell Technologies PowerProtect Data Domain: information disclosure | Medium5.5 | 8.8.0.0 or later+3 more |