{"vulnerability": "CVE-2026-40639", "sightings": [{"uuid": "fb88c9d9-369e-4131-aa73-83376359c6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://t.me/CyberDispatch/2255", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639).", "creation_timestamp": "2026-08-30T00:00:28.800104Z"}, {"uuid": "333a6b07-3a88-4d88-82b3-3358f7427a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k", "content": "Dell\u306eBIOS\u6b20\u9665\u3001SPI\u30d5\u30e9\u30c3\u30b7\u30e5\u304b\u3089\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5fa9\u5143\u53ef\u80fd\u306b\n\nDell\u304cBIOS\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u304a\u3088\u3073\u30e6\u30fc\u30b6\u30fc\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fdd\u5b58\u3059\u308b\u65b9\u5f0f\u306b\u95a2\u3057\u3066\u3001\u65b0\u305f\u306b\u91cd\u5927\u306a\u6b20\u9665\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d5\u30e9\u30c3\u30b7\u30e5\u30c0\u30f3\u30d7\u304b\u3089\u308f\u305a\u304b\u6570\u30df\u30ea\u79d2\u3067\u5e73\u6587\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5b8c\u5168\u306b\u5fa9\u5143\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 CVE-2026-40639(DSA-2026-197)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u554f\u984c\u306f\u3001\u6697\u53f7\u5b66\u7684\u30cf\u30c3\u30b7\u30e5\u3067\u306f", "creation_timestamp": "2026-07-11T06:22:17.452252Z"}, {"uuid": "d86e64fa-5cde-489d-adff-500d43689482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-11T17:39:31.952664Z"}, {"uuid": "2fd8a7a5-1844-4e9b-b63a-0d9e0cbdd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40639", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907368666921137", "content": "\ud83d\udcf0 Critical Dell BIOS Flaw Allows Plaintext Password Recovery in Milliseconds\n\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/dell-bios-flaw-cve-2026-40639-instant-password-recovery/?utm_source=mastodon\u2026", "creation_timestamp": "2026-07-12T14:01:19.301454Z"}, {"uuid": "d6ba2f05-438a-4629-85b5-8b3bf969a956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpgrkyp25", "content": "\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:01:59.692874Z"}, {"uuid": "b2e5c1c1-4616-4c50-9de1-dff71a18e84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mqjfpii7dr2y", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-13T09:43:08.324237Z"}, {"uuid": "42bacecc-93cf-4ad0-a550-9fd3ffd43ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqjgdvgbpv2c", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-13T09:54:32.708919Z"}, {"uuid": "75b3fe0a-cc41-4071-964a-aa94c3adf59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mqjy5rqy5v27", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n blog.amberwolf.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-13T15:13:14.796738Z"}, {"uuid": "d1d57ce9-a986-45d5-ba9f-72aad3024aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mqllxw4ibn2b", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-14T06:40:32.750335Z"}, {"uuid": "23cf2b9e-e7a5-40b8-a75e-7b3f5584d82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://t.me/CyberDispatch/2255", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639).", "creation_timestamp": "2026-08-29T20:00:07.333680Z"}, {"uuid": "581008e5-01b2-45aa-9282-0e4d8d715202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mqpcgucbo72o", "content": "BIOS Dell, cifratura XOR debole permette il recupero delle password\nTutti i dettagli sulla vulnerabilit\u00e0 CVE-2026-40639: con alcuni BIOS Dell, la password usata a protezione del sistema ris...\nhttps://www.ilsoftware.it/password-bios-dell-recuperabili/", "creation_timestamp": "2026-07-15T18:00:35.581223Z"}, {"uuid": "7d7a6403-859b-4fb0-a656-0dce9841cd79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrp2kyeknk26", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n www.mdsec.co.uk -> \n\n\nOriginal->", "creation_timestamp": "2026-07-28T09:04:55.830316Z"}, {"uuid": "ff633570-f63c-4dbb-b24f-e6a973ddacc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40639", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muxjfffvi32p", "content": "\ud83d\udccc Dell BIOS Password Vulnerability Due to Weak XOR Encryption (CVE-2026-40639) https://www.cyberhub.blog/article/28932-dell-bios-password-vulnerability-due-to-weak-xor-encryption-cve-2026-40639", "creation_timestamp": "2026-09-07T22:07:07.334897Z"}, {"uuid": "2b1f531a-db9e-410f-a5e8-50df89679bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/uyv6H_lehbQ70gjvKN_Xwg9VNAZk6lGEafYE2KqtPVnN3Tk", "content": "", "creation_timestamp": "2026-09-12T12:00:05.694137Z"}, {"uuid": "eeb97daa-bb7c-494b-a9f8-bd0987c75776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/DtsxZ_O5tiygvWMcXDmJAgHtG4B9NuNJM9C9_fBQlIa8p7c", "content": "", "creation_timestamp": "2026-09-12T18:00:05.510961Z"}, {"uuid": "20207a16-02da-41c5-9cd2-ba0a264b13fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/CsUshP5arzIKbJieptz6gAJylUyEAG5PopomHswcTxHK28U", "content": "", "creation_timestamp": "2026-09-12T22:00:05.286991Z"}, {"uuid": "2add7a7e-87fa-4524-866b-0005ce310a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/DtsxZ_O5tiygvWMcXDmJAgHtG4B9NuNJM9C9_fBQlIa8p7c", "content": "", "creation_timestamp": "2026-09-13T00:00:36.313440Z"}, {"uuid": "3c153281-5d0e-40c6-b44d-1aacf2414191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/CsUshP5arzIKbJieptz6gAJylUyEAG5PopomHswcTxHK28U", "content": "", "creation_timestamp": "2026-09-13T00:00:06.485331Z"}, {"uuid": "d4942df0-c52f-4fe6-a40f-22705f1cb830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/uyv6H_lehbQ70gjvKN_Xwg9VNAZk6lGEafYE2KqtPVnN3Tk", "content": "", "creation_timestamp": "2026-09-13T00:00:53.982536Z"}, {"uuid": "263370e0-6837-4d14-b03a-0b154045c1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/AqEeUcNwF3uOaVuRmPwiR0jSjBREXdbfGPRnVloWxE-8RNw", "content": "", "creation_timestamp": "2026-09-13T05:00:04.319823Z"}, {"uuid": "a5cbdde4-4ac4-4720-8bcd-7bc7661aa79b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/b2WMoC8XClqoe0qL00B9zc-wX5c7ckUoewIc70QuDKt6aDI", "content": "", "creation_timestamp": "2026-09-13T15:00:04.616900Z"}, {"uuid": "459fff68-c28c-4458-9f71-4216b5a09d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/-M3eZbTd2AYyKmUKR6u4dB1yFPA3QbnaxrMEX2s4Vl06NWU", "content": "", "creation_timestamp": "2026-09-13T19:00:07.413783Z"}, {"uuid": "64cdfbb1-a462-4906-b006-fb9bc96838e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/MTuYJ_wf7qSRnCmFkRf8RaJfQe9r8j4aEoSvxbWtPVxLHk4", "content": "", "creation_timestamp": "2026-09-14T00:00:08.247472Z"}, {"uuid": "b9bb3f9a-2f54-4314-9ac0-28c7feccc438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/-M3eZbTd2AYyKmUKR6u4dB1yFPA3QbnaxrMEX2s4Vl06NWU", "content": "", "creation_timestamp": "2026-09-14T00:00:12.136039Z"}, {"uuid": "1b72e46c-a0ff-4cff-9b7f-1a203900d4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/b2WMoC8XClqoe0qL00B9zc-wX5c7ckUoewIc70QuDKt6aDI", "content": "", "creation_timestamp": "2026-09-14T00:00:13.561742Z"}, {"uuid": "05a751c6-02ee-4bf1-bc5c-9fd2b144dddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/AqEeUcNwF3uOaVuRmPwiR0jSjBREXdbfGPRnVloWxE-8RNw", "content": "", "creation_timestamp": "2026-09-14T00:00:30.838098Z"}, {"uuid": "35f2e817-a1d6-4f4b-89a0-d88dfbebb22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/1tDDt7q4Ri2nCWUL3lSxJKDvDxf5KqvUObJfNr8Q9GdMxkk", "content": "", "creation_timestamp": "2026-09-14T04:00:03.928417Z"}, {"uuid": "1188b8e7-260f-4f70-9c70-944e6012ac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/4i4YusYknKn1Fd9xi1x_3ShzEEBuFNt1U4205IRz7S6a8Go", "content": "", "creation_timestamp": "2026-09-14T15:00:04.175417Z"}]}