{"metadata": {"vulnerability": "CVE-2026-40639", "count": 87, "kinds": {"milestone": 5, "sighting": 69, "kev": 0, "other": 13}, "linked_omitted": 0}, "data": [{"timestamp": "2026-04-14T16:10:47.675Z", "date_only": false, "value": "2026-04-14T16:10:47.675Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-40639", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-09T17:58:00Z", "date_only": false, "value": "2026-06-09T17:58:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T18:04:53.344Z", "date_only": false, "value": "2026-06-09T18:04:53.344Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-40639", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T18:04:53.344Z", "date_only": false, "value": "2026-06-09T18:04:53.344Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-09T18:58:36.468Z", "date_only": false, "value": "2026-06-09T18:58:36.468011Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40639", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-09T18:58:36.468Z", "date_only": false, "value": "2026-06-09T18:58:36.468011Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40639", "record": "FKIE_CVE-2026-40639", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-09T19:12:13.457Z", "date_only": false, "value": "2026-06-09T19:12:13.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-40639", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-09T19:12:13.457Z", "date_only": false, "value": "2026-06-09T19:12:13.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40639", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-09T19:17:53Z", "date_only": false, "value": "2026-06-09T19:17:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WGCP-RFQ6-33JH", "record": "GHSA-WGCP-RFQ6-33JH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-09T19:17:53.043Z", "date_only": false, "value": "2026-06-09T19:17:53.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40639", "record": "FKIE_CVE-2026-40639", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-09T21:32:36Z", "date_only": false, "value": "2026-06-09T21:32:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WGCP-RFQ6-33JH", "record": "GHSA-WGCP-RFQ6-33JH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-09T21:32:36Z", "date_only": false, "value": "2026-06-09T21:32:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WGCP-RFQ6-33JH", "record": "GHSA-WGCP-RFQ6-33JH", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1853", "record": "WID-SEC-W-2026-1853", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1853", "record": "WID-SEC-W-2026-1853", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1853", "record": "WID-SEC-W-2026-1853", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1853", "record": "WID-SEC-W-2026-1853", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-10T07:50:57.453Z", "date_only": false, "value": "2026-06-10T07:50:57.453+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1853", "record": "WID-SEC-W-2026-1853", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-10T06:19:47.632Z", "date_only": false, "value": "2026-07-10T06:19:47.632000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "a01140aa-82d6-4748-aa94-3c43ae19d6f5", "url": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T06:22:17.452Z", "date_only": false, "value": "2026-07-11T06:22:17.452252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "333a6b07-3a88-4d88-82b3-3358f7427a78", "content": "Dell\u306eBIOS\u6b20\u9665\u3001SPI\u30d5\u30e9\u30c3\u30b7\u30e5\u304b\u3089\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5fa9\u5143\u53ef\u80fd\u306b\n\nDell\u304cBIOS\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u304a\u3088\u3073\u30e6\u30fc\u30b6\u30fc\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fdd\u5b58\u3059\u308b\u65b9\u5f0f\u306b\u95a2\u3057\u3066\u3001\u65b0\u305f\u306b\u91cd\u5927\u306a\u6b20\u9665\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d5\u30e9\u30c3\u30b7\u30e5\u30c0\u30f3\u30d7\u304b\u3089\u308f\u305a\u304b\u6570\u30df\u30ea\u79d2\u3067\u5e73\u6587\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5b8c\u5168\u306b\u5fa9\u5143\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 CVE-2026-40639(DSA-2026-197)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u554f\u984c\u306f\u3001\u6697\u53f7\u5b66\u7684\u30cf\u30c3\u30b7\u30e5\u3067\u306f", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k"}, {"timestamp": "2026-07-11T17:39:31.952Z", "date_only": false, "value": "2026-07-11T17:39:31.952664Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d86e64fa-5cde-489d-adff-500d43689482", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u"}, {"timestamp": "2026-07-12T14:01:19.301Z", "date_only": false, "value": "2026-07-12T14:01:19.301454Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907368666921137", "record": "cve-2026-40639", "field": "creation_timestamp", "uuid": "2fd8a7a5-1844-4e9b-b63a-0d9e0cbdd3d0", "content": "\ud83d\udcf0 Critical Dell BIOS Flaw Allows Plaintext Password Recovery in Milliseconds\n\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/dell-bios-flaw-cve-2026-40639-instant-password-recovery/?utm_source=mastodon\u2026", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116907368666921137"}, {"timestamp": "2026-07-12T14:01:59.692Z", "date_only": false, "value": "2026-07-12T14:01:59.692874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpgrkyp25", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d6ba2f05-438a-4629-85b5-8b3bf969a956", "content": "\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpgrkyp25"}, {"timestamp": "2026-07-13T09:43:08.324Z", "date_only": false, "value": "2026-07-13T09:43:08.324237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mqjfpii7dr2y", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "b2e5c1c1-4616-4c50-9de1-dff71a18e84c", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mqjfpii7dr2y"}, {"timestamp": "2026-07-13T09:54:32.708Z", "date_only": false, "value": "2026-07-13T09:54:32.708919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqjgdvgbpv2c", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "42bacecc-93cf-4ad0-a550-9fd3ffd43ecd", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqjgdvgbpv2c"}, {"timestamp": "2026-07-13T15:13:14.796Z", "date_only": false, "value": "2026-07-13T15:13:14.796738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mqjy5rqy5v27", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "75b3fe0a-cc41-4071-964a-aa94c3adf59d", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n blog.amberwolf.com -> \n\n\nOriginal->", "url": "https://bsky.app/profile/buherator.bsky.social/post/3mqjy5rqy5v27"}, {"timestamp": "2026-07-14T06:40:32.750Z", "date_only": false, "value": "2026-07-14T06:40:32.750335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mqllxw4ibn2b", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d1d57ce9-a986-45d5-ba9f-72aad3024aee", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "url": "https://bsky.app/profile/nono2357.bsky.social/post/3mqllxw4ibn2b"}, {"timestamp": "2026-07-15T18:00:35.581Z", "date_only": false, "value": "2026-07-15T18:00:35.581223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mqpcgucbo72o", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "581008e5-01b2-45aa-9282-0e4d8d715202", "content": "BIOS Dell, cifratura XOR debole permette il recupero delle password\nTutti i dettagli sulla vulnerabilit\u00e0 CVE-2026-40639: con alcuni BIOS Dell, la password usata a protezione del sistema ris...\nhttps://www.ilsoftware.it/password-bios-dell-recuperabili/", "url": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mqpcgucbo72o"}, {"timestamp": "2026-07-23T09:10:00.113Z", "date_only": false, "value": "2026-07-23T09:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40639", "record": "FKIE_CVE-2026-40639", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-28T09:04:55.830Z", "date_only": false, "value": "2026-07-28T09:04:55.830316Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrp2kyeknk26", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "7d7a6403-859b-4fb0-a656-0dce9841cd79", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n www.mdsec.co.uk -> \n\n\nOriginal->", "url": "https://bsky.app/profile/buherator.bsky.social/post/3mrp2kyeknk26"}, {"timestamp": "2026-08-29T20:00:07.333Z", "date_only": false, "value": "2026-08-29T20:00:07.333680Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2255", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "23cf2b9e-e7a5-40b8-a75e-7b3f5584d82b", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639).", "url": "https://t.me/CyberDispatch/2255"}, {"timestamp": "2026-09-07T22:07:07.334Z", "date_only": false, "value": "2026-09-07T22:07:07.334897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muxjfffvi32p", "record": "cve-2026-40639", "field": "creation_timestamp", "uuid": "ff633570-f63c-4dbb-b24f-e6a973ddacc2", "content": "\ud83d\udccc Dell BIOS Password Vulnerability Due to Weak XOR Encryption (CVE-2026-40639) https://www.cyberhub.blog/article/28932-dell-bios-password-vulnerability-due-to-weak-xor-encryption-cve-2026-40639", "url": "https://bsky.app/profile/cyberhub.blog/post/3muxjfffvi32p"}, {"timestamp": "2026-09-12T12:00:05.694Z", "date_only": false, "value": "2026-09-12T12:00:05.694137Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uyv6H_lehbQ70gjvKN_Xwg9VNAZk6lGEafYE2KqtPVnN3Tk", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "2b1f531a-db9e-410f-a5e8-50df89679bd7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T18:00:05.510Z", "date_only": false, "value": "2026-09-12T18:00:05.510961Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DtsxZ_O5tiygvWMcXDmJAgHtG4B9NuNJM9C9_fBQlIa8p7c", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "eeb97daa-bb7c-494b-a9f8-bd0987c75776", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T22:00:05.286Z", "date_only": false, "value": "2026-09-12T22:00:05.286991Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CsUshP5arzIKbJieptz6gAJylUyEAG5PopomHswcTxHK28U", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "20207a16-02da-41c5-9cd2-ba0a264b13fb"}, {"timestamp": "2026-09-13T00:00:06.485Z", "date_only": false, "value": "2026-09-13T00:00:06.485331Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CsUshP5arzIKbJieptz6gAJylUyEAG5PopomHswcTxHK28U", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "3c153281-5d0e-40c6-b44d-1aacf2414191", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T05:00:04.319Z", "date_only": false, "value": "2026-09-13T05:00:04.319823Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AqEeUcNwF3uOaVuRmPwiR0jSjBREXdbfGPRnVloWxE-8RNw", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "263370e0-6837-4d14-b03a-0b154045c1a3"}, {"timestamp": "2026-09-13T15:00:04.616Z", "date_only": false, "value": "2026-09-13T15:00:04.616900Z", "kind": "sighting", "label": "Seen", "source": "Telegram/b2WMoC8XClqoe0qL00B9zc-wX5c7ckUoewIc70QuDKt6aDI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "a5cbdde4-4ac4-4720-8bcd-7bc7661aa79b"}, {"timestamp": "2026-09-13T19:00:07.413Z", "date_only": false, "value": "2026-09-13T19:00:07.413783Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-M3eZbTd2AYyKmUKR6u4dB1yFPA3QbnaxrMEX2s4Vl06NWU", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "459fff68-c28c-4458-9f71-4216b5a09d61", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:08.247Z", "date_only": false, "value": "2026-09-14T00:00:08.247472Z", "kind": "sighting", "label": "Seen", "source": "Telegram/MTuYJ_wf7qSRnCmFkRf8RaJfQe9r8j4aEoSvxbWtPVxLHk4", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "64cdfbb1-a462-4906-b006-fb9bc96838e2"}, {"timestamp": "2026-09-14T00:00:13.561Z", "date_only": false, "value": "2026-09-14T00:00:13.561742Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b2WMoC8XClqoe0qL00B9zc-wX5c7ckUoewIc70QuDKt6aDI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "1b72e46c-a0ff-4cff-9b7f-1a203900d4da", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:30.838Z", "date_only": false, "value": "2026-09-14T00:00:30.838098Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AqEeUcNwF3uOaVuRmPwiR0jSjBREXdbfGPRnVloWxE-8RNw", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "05a751c6-02ee-4bf1-bc5c-9fd2b144dddd", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T04:00:03.928Z", "date_only": false, "value": "2026-09-14T04:00:03.928417Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1tDDt7q4Ri2nCWUL3lSxJKDvDxf5KqvUObJfNr8Q9GdMxkk", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "35f2e817-a1d6-4f4b-89a0-d88dfbebb22c"}, {"timestamp": "2026-09-14T15:00:04.175Z", "date_only": false, "value": "2026-09-14T15:00:04.175417Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4i4YusYknKn1Fd9xi1x_3ShzEEBuFNt1U4205IRz7S6a8Go", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "1188b8e7-260f-4f70-9c70-944e6012ac47", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T20:00:06.408Z", "date_only": false, "value": "2026-09-14T20:00:06.408219Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Uqanuk5dk4ZA8D23L-2LNasZnRTU3sdYqqeORKtQzcvbr98", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "bbe1d537-fbc6-4226-acfb-58e5f3de9f7e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:30.817Z", "date_only": false, "value": "2026-09-15T00:00:30.817244Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1tDDt7q4Ri2nCWUL3lSxJKDvDxf5KqvUObJfNr8Q9GdMxkk", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "3187a297-0043-4dc6-a697-e6399bf7ea59", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:32.169Z", "date_only": false, "value": "2026-09-15T00:00:32.169768Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MTuYJ_wf7qSRnCmFkRf8RaJfQe9r8j4aEoSvxbWtPVxLHk4", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "1665a290-bd29-428c-811e-ba01252342ed", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T01:00:03.947Z", "date_only": false, "value": "2026-09-15T01:00:03.947299Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fFBF7mVsz0rCXqXMGrlMVc9Ew1Ey-dIQksoWrAviXEGI8J8", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "5f239c19-79cf-44e6-8a23-e3baa06122e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T07:00:06.006Z", "date_only": false, "value": "2026-09-15T07:00:06.006518Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/34oMg1-Gn6mRzv2MJl5emZJ8b1ZXjFUj7yq5X5iygscGSbQ", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "74f70319-6d2c-4376-90fc-1fdd902aa1ac", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T14:00:06.348Z", "date_only": false, "value": "2026-09-15T14:00:06.348760Z", "kind": "sighting", "label": "Seen", "source": "Telegram/k1HY5hkRGuGbgiLX4kc1zSEjVWi9x8zjuUqI-mBPFEIQZWg", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "fb8fa467-e552-49de-9d8f-12ffa1c635e2"}, {"timestamp": "2026-09-15T20:00:04.318Z", "date_only": false, "value": "2026-09-15T20:00:04.318800Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BcxDOIYlKlxpC1msnKzTRgs9bWpGJkRXtvm2n5p7j_652mI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "77e11e7d-5c46-445e-91b9-192f952c6b42"}, {"timestamp": "2026-09-15T23:00:05.826Z", "date_only": false, "value": "2026-09-15T23:00:05.826778Z", "kind": "sighting", "label": "Seen", "source": "Telegram/palh9fAqxpBQ7YpELCrlZPbyyN-Y11w4-BP1kX4fPsTTBKQ", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "7241a861-a677-4745-8706-192704c5f0a4"}, {"timestamp": "2026-09-16T00:00:07.850Z", "date_only": false, "value": "2026-09-16T00:00:07.850808Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/palh9fAqxpBQ7YpELCrlZPbyyN-Y11w4-BP1kX4fPsTTBKQ", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "3cf35c53-d766-4cf2-8717-f92c4062b886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:12.334Z", "date_only": false, "value": "2026-09-16T00:00:12.334769Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BcxDOIYlKlxpC1msnKzTRgs9bWpGJkRXtvm2n5p7j_652mI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "68a6ae2d-bfa9-46f9-91b9-4171dbc2f19c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:13.283Z", "date_only": false, "value": "2026-09-16T00:00:13.283105Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k1HY5hkRGuGbgiLX4kc1zSEjVWi9x8zjuUqI-mBPFEIQZWg", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "cead5b96-e484-4103-911f-3a1d5b8eeb12", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T07:00:03.816Z", "date_only": false, "value": "2026-09-17T07:00:03.816633Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "7247eb91-b3d2-45a4-ba9f-fa9a01810325"}, {"timestamp": "2026-09-18T00:00:09.693Z", "date_only": false, "value": "2026-09-18T00:00:09.693076Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "23a350fc-050b-4243-982d-6a86d1cc543a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-23T11:37:04.670Z", "date_only": false, "value": "2026-09-23T11:37:04.670907Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnipitc2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "79a913a4-0985-48e2-a9c5-049e403e8d36", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnipitc2f"}, {"timestamp": "2026-09-23T11:37:05.637Z", "date_only": false, "value": "2026-09-23T11:37:05.637624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniqc7s2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "df95f4b0-a18f-44a6-810a-403d5a3a56b1", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniqc7s2f"}, {"timestamp": "2026-09-23T11:37:06.599Z", "date_only": false, "value": "2026-09-23T11:37:06.599764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniqh422f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "22b76508-2f18-4366-8226-5327470e752d", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniqh422f"}, {"timestamp": "2026-09-23T11:37:07.602Z", "date_only": false, "value": "2026-09-23T11:37:07.602458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnirwxc2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "947e7ca8-0761-473b-bfa2-94821ef0cbc7", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnirwxc2f"}, {"timestamp": "2026-09-23T11:37:08.557Z", "date_only": false, "value": "2026-09-23T11:37:08.557206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniryvs2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "f38dd627-0f82-4ae4-b95e-daf746b289f9", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nniryvs2f"}, {"timestamp": "2026-09-23T11:37:09.509Z", "date_only": false, "value": "2026-09-23T11:37:09.509749Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnis7qk2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "9a89fc4a-f492-44a5-9380-6f9f0d868045", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnis7qk2f"}, {"timestamp": "2026-09-23T11:37:10.448Z", "date_only": false, "value": "2026-09-23T11:37:10.448342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnit5222f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "6b5172da-c66d-410f-8dff-d29059971544", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnit5222f"}, {"timestamp": "2026-09-23T11:37:11.394Z", "date_only": false, "value": "2026-09-23T11:37:11.394633Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnit7xs2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d2b4cf37-8226-4111-83e7-3cf9f7d1f900", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnit7xs2f"}, {"timestamp": "2026-09-23T11:37:12.356Z", "date_only": false, "value": "2026-09-23T11:37:12.356096Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnitdus2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "26baf5c3-555c-449d-876a-55efc2f649df", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnitdus2f"}, {"timestamp": "2026-09-23T11:37:13.286Z", "date_only": false, "value": "2026-09-23T11:37:13.286955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnithrs2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "3a051f60-cf31-415d-981e-a60a711b33e4", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnithrs2f"}, {"timestamp": "2026-09-23T11:37:14.344Z", "date_only": false, "value": "2026-09-23T11:37:14.344535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnivj7k2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "63fa9e43-3b4e-42c8-baa5-1bf6972b4e1b", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnivj7k2f"}, {"timestamp": "2026-09-23T11:37:15.290Z", "date_only": false, "value": "2026-09-23T11:37:15.290212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnix2zc2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "ac5743c2-6727-4cdf-b51b-7dddd2b6ec64", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnix2zc2f"}, {"timestamp": "2026-09-23T11:37:16.211Z", "date_only": false, "value": "2026-09-23T11:37:16.211544Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnixaus2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d43c6da5-bdfa-4070-b4f8-86d636d0545c", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnixaus2f"}, {"timestamp": "2026-09-23T11:37:17.171Z", "date_only": false, "value": "2026-09-23T11:37:17.171564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj2q7c2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "32396c84-2f10-4d29-829c-d0dffafd93b8", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj2q7c2f"}, {"timestamp": "2026-09-23T11:37:18.417Z", "date_only": false, "value": "2026-09-23T11:37:18.417952Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj2w2s2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "faedd7b4-3631-40a8-a2d6-d722bb4a45cf", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj2w2s2f"}, {"timestamp": "2026-09-23T11:37:19.362Z", "date_only": false, "value": "2026-09-23T11:37:19.362812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj34vk2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "4490dd2c-0ddf-477f-9861-441019fe4b18", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj34vk2f"}, {"timestamp": "2026-09-23T11:37:20.289Z", "date_only": false, "value": "2026-09-23T11:37:20.289863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3brs2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "e1fc243d-a89b-4b80-9389-55c7028ea494", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3brs2f"}, {"timestamp": "2026-09-23T11:37:21.267Z", "date_only": false, "value": "2026-09-23T11:37:21.267223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3fos2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "90a4b753-ff16-4228-aa25-b73c9313bfc9", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3fos2f"}, {"timestamp": "2026-09-23T11:37:22.326Z", "date_only": false, "value": "2026-09-23T11:37:22.326883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3kl22f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "fc1f72a3-7327-4802-809c-2b62d2409152", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3kl22f"}, {"timestamp": "2026-09-23T11:37:23.271Z", "date_only": false, "value": "2026-09-23T11:37:23.271895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3nis2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "3c574afa-c155-4f8e-8acd-0366fdbee919", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3nis2f"}, {"timestamp": "2026-09-23T11:37:24.238Z", "date_only": false, "value": "2026-09-23T11:37:24.238370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3qgk2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "4221b45c-c7ae-4dfe-ae06-474172ceeada", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3qgk2f"}, {"timestamp": "2026-09-23T11:37:25.183Z", "date_only": false, "value": "2026-09-23T11:37:25.183337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3tec2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "05518a5d-84e0-42be-af6e-d5b88f11d0ae", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3tec2f"}, {"timestamp": "2026-09-23T11:37:26.140Z", "date_only": false, "value": "2026-09-23T11:37:26.140612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3vcs2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "6cfb8da5-1707-4aa5-a4e2-ebe267ef02fc", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3vcs2f"}, {"timestamp": "2026-09-23T11:37:27.105Z", "date_only": false, "value": "2026-09-23T11:37:27.105779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3z7s2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d0d74a10-c454-4d90-8fe4-7e2612da6d5e", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj3z7s2f"}, {"timestamp": "2026-09-23T11:37:28.048Z", "date_only": false, "value": "2026-09-23T11:37:28.048251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj445k2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "81d2b1e4-541d-4d30-b190-9c5bbfd8d2f5", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj445k2f"}, {"timestamp": "2026-09-23T11:37:29.010Z", "date_only": false, "value": "2026-09-23T11:37:29.010194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj46422f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "84690d53-7554-445b-b08a-bd0e5c5cd603", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj46422f"}, {"timestamp": "2026-09-23T11:37:29.964Z", "date_only": false, "value": "2026-09-23T11:37:29.964523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4a2k2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "10885025-0b77-4346-bb02-e3417f25323c", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4a2k2f"}, {"timestamp": "2026-09-23T11:37:30.914Z", "date_only": false, "value": "2026-09-23T11:37:30.914411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4cyc2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "e9d9543d-534e-4c23-88b4-3eeebfcc3ee3", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4cyc2f"}, {"timestamp": "2026-09-23T11:37:31.870Z", "date_only": false, "value": "2026-09-23T11:37:31.870711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4ews2f", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "d70d5b01-90dd-452a-8b04-1cc1532305df", "content": "2026-07-10\n\"Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\"\nby Craig S. Blackie @craigsblackie.bsky.social  et al.\nAdded here: darkmentor.com/timeline.htm...", "url": "https://bsky.app/profile/xenokovah.bsky.social/post/3mw6nnj4ews2f"}, {"timestamp": "2026-09-25T09:13:58Z", "date_only": false, "value": "2026-09-25T09:13:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/goP8j3y3WFtUS7DbFaf0zDMPnf4Bu_40lwsWu0Ozw2qPHqM", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "9c1475b9-279d-4e39-9c1d-1ba11b7f61f7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:13:58Z", "date_only": false, "value": "2026-09-25T09:13:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/goP8j3y3WFtUS7DbFaf0zDMPnf4Bu_40lwsWu0Ozw2qPHqM", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "1188f469-da5c-4098-b1cc-abc8d6b0d651"}], "metrics": {"as_of": "2026-11-13T05:22:10.632Z", "anchors": {"origin": {"timestamp": "2026-06-09T17:58:00Z", "date_only": false, "value": "2026-06-09T17:58:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-09T17:58:00Z", "date_only": false, "value": "2026-06-09T17:58:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-10T06:19:47.632Z", "date_only": false, "value": "2026-07-10T06:19:47.632000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "a01140aa-82d6-4748-aa94-3c43ae19d6f5", "url": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2636507.632, "hours": 732.3632311111112, "days": 30.51513462962963, "min_seconds": 2636507.632, "max_seconds": 2636507.632, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-09T17:58:00Z", "date_only": false, "value": "2026-06-09T17:58:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-10T06:19:47.632Z", "date_only": false, "value": "2026-07-10T06:19:47.632000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "a01140aa-82d6-4748-aa94-3c43ae19d6f5", "url": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13519450.632206, "hours": 3755.4029533905555, "days": 156.4751230579398, "min_seconds": 13519450.632206, "max_seconds": 13519450.632206, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-09T17:58:00Z", "date_only": false, "value": "2026-06-09T17:58:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2026-40639", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T05:22:10.632Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 10882943.000206, "hours": 3023.039722279444, "days": 125.95998842831018, "min_seconds": 10882943.000206, "max_seconds": 10882943.000206, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-10T06:19:47.632Z", "date_only": false, "value": "2026-07-10T06:19:47.632000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "record": "CVE-2026-40639", "field": "creation_timestamp", "uuid": "a01140aa-82d6-4748-aa94-3c43ae19d6f5", "url": "https://www.mdsec.co.uk/2026/07/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T05:22:10.632Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}