Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

Craig S. Blackie (MDSec) and Darren McDonald (AmberWolf) | 10 July 2026 A joint discovery, published in parallel on the AmberWolf and MDSec blogs. Summary Dell stores its BIOS administrator … Continue reading Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)