vciy

CVE-2022-26860

INDEX BUILT · 2026-10-18

No source can show you its own past. This one can.

Print this page to keep the view as it stands on this date. Everything hidden behind a disclosure opens, and every receipt prints with its value.

Dell BIOS versions contain a stack-based buffer overflow vulnerability

CVE-2022-268604 of 4 sources documented this
40

rank 40 = 0 + 20 + 0 + 20 + 0

rank@v1 · scheduled

Someone is already using it

CISA KEV catalog · public proof-of-concept · FIRST EPSS

EPSS 0.00195  ·  without this subject the record ranks 40

What it costs you if it fires

NVD CVSS base score, then the CNA's own

CVSS 7.8, from NVD  ·  without this subject the record ranks 20

It is getting worse, not staying still

FIRST EPSS series, rescorings and bad loads removed

no persisting rise in 365 days  ·  without this subject the record ranks 40

How much of the world it touches

NVD CPE configurations

399 products in the CPE ranges  ·  without this subject the record ranks 20

Someone else already set the date

CISA KEV remediation due date

no CISA due date  ·  without this subject the record ranks 40

Hindsight · the state

0.00195EPSSNOT IN KEVas of 2026-10-18
Severity7.5 HIGHreceipt
Harmtotal lossreceipt
Exploitationnone in held sources
Defenseunaffected versions publishedreceipt
Movementdoubled within 72hreceipt
PLATEAU10Minimal movement since 2022-09-07, 1457 days at 0.00, as of 2026-09-03. arc-rules@v1

Foresight · where to check next

Ivanti ConnectCisco SmallSonicWall SMA100DD-WRT26860

This record is one instance of CWE-121, stack-based buffer overflow. The index holds 4004 prior instances of this class, 20 KEV-listed. The nearest of its KEV-listed records are drawn beside this. taxonomy@v1

Full pattern panel

Prior records in this weakness class. Each is its own record, dated and receipted.
Color is a claim, not decoration:the hostile worldthe defenseno signalspoke length is how much of the record matches, not how bad it is

Sources disagree here.

Severity score
Dell7.5 HIGHreceipt
NVD7.8 HIGHreceipt
What it costs
DellComplete confidentiality, integrity and availability loss, with impact beyond the vulnerable componentreceipt
NVDComplete confidentiality, integrity and availability lossreceipt

Both shown, dated. We don't pick winners. disagreement-rules@v1

Running Dell CPG BIOS? Check your version

A deterministic range check against the ranges this record publishes. It tells you where a version sits in the record, not whether your deployment is exploitable. No account needed.

Watch this record

Matches your own product list against every record this index holds, and tells you when one of them moves.

What counts as a move

Watch Dell CPG BIOS

Set up a watchlist (free with an account: one stack of three products)

Record your call

Keep your verdict, your reason and the evidence together. The record takes its date when you save it.

Patch by…

Or open an investigation: an incident or a near miss on this CVE, kept with its evidence where anyone in your organisation can find it.

Choose your verdict, then sign in or use an email link. Your first 100 records are free. Evidence is frozen when the record is created.

Private to your organization unless you share it. Put the proof link in your ticket so a reviewer can inspect the basis for your call. See how decision records work.

Harm, if it fires from the vector and the weakness

Written for the ticket you're about to file.

Reachneeds local access · high privileges required · no user interaction · high attack complexityreceipt
ImpactComplete confidentiality, integrity and availability loss, with impact beyond the vulnerable componentreceipt
Scored fromCVSS v3.1 · the CNA's vectorreceipt
Weakness classCWE-121 Stack-based Buffer Overflowreceipt
Published consequencesCWE-121: Availability: Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)…cwe-consequences@4.20

CISA KEV & Federal Remediation Deadline from the record and CISA

The fix, and how long it's been waiting.

First unaffected version, by branchinspiron 1.1.66; inspiron 1.10.0; inspiron 1.11.0; inspiron 1.11.1; inspiron 1.12.0; inspiron 1.13.0receipt
Patch available sinceNo dated patch-availability record in held sources. The index holds reference URLs without dates and only the current revision of the CVE record, so the day a fix first existed cannot be derived. Only the versions it landed in.
BOD 26-04 deadlineIf the system is reachable from the internet: 14 days. If not: fix at the next system upgrade.derived
Show full BOD 26-04 deadline

CISA has not scored it, so the directive's own defaults apply: automatable no, technical impact total. Calendar days from the KEV listing or from when you find it on a system, whichever is first. Federal agencies are bound from 7 Dec 2026, and contracts often carry it to suppliers. The directive and its table

Exploit Status & Known PoCs a ladder, not a score

Current rung: Nothing observed in held sources.

  • RUNG 1Nothing observed in held sources
  • RUNG 2Proof-of-concept published
  • RUNG 3Exploited in the wild · CISA KEV listed
  • RUNG 4Ransomware campaign use known

Authority who says so

CVSS, the CNA7.5 HIGHreceipt
CVSS, NVD7.8 HIGHreceipt
Exploit probability0.00195 · top 91% of all CVEsreceipt
Blast breadth23 products across 1 vendorderived
Assigned bydellreceipt
Recorded changes17 · last 18 Oct 2026derived

Affected & Fixed Versions as published

Affected productDell CPG BIOSreceipt
Published rangesdell alienware m15 r6 firmware < 1.8.0; dell chengming 3980 firmware < 2.21.0; dell chengming 3988 firmware < 1.9.0; dell chengming 3990 firmware < 1.8.2receipt
Show all 399 published ranges
dell alienware m15 r6 firmware < 1.8.0
dell chengming 3980 firmware < 2.21.0
dell chengming 3988 firmware < 1.9.0
dell chengming 3990 firmware < 1.8.2
dell chengming 3991 firmware < 1.8.2
dell g15 5510 firmware < 1.8.0
dell g15 5511 firmware < 1.9.0
dell g3 15 3590 firmware < 1.16.0
dell g3 3500 firmware < 1.12.0
dell g3 3579 firmware < 1.19.0
dell g5 15 5587 firmware < 1.19.0
dell g5 15 5590 firmware < 1.18.0
dell g5 5000 firmware < 1.5.1
dell g5 5090 firmware < 1.12.0
dell g5 5500 firmware < 1.12.0
dell g7 7500 firmware < 1.12.0
dell g7 7588 firmware < 1.19.0
dell g7 17 7700 firmware < 1.12.0
dell g7 17 7790 firmware < 1.18.0
dell latitude 3480 firmware < 1.19.1
dell latitude 3580 firmware < 1.19.1
dell edge gateway 3000 firmware < 1.8.0
dell edge gateway 5000 firmware < 1.18.0
dell embedded box pc 3000 firmware < 1.14.0
dell embedded box pc 5000 firmware < 1.15.0
dell inspiron 13 5378 firmware < 1.36.0
dell inspiron 13 5379 firmware < 1.19.0
dell inspiron 13 7378 firmware < 1.36.0
dell inspiron 14 3467 firmware < 2.18.0
dell inspiron 14 3476 firmware < 1.16.0
dell inspiron 15 3567 firmware < 2.18.0
dell inspiron 15 5566 firmware < 1.17.0
dell inspiron 15 5578 firmware < 1.36.0
dell inspiron 15 5579 firmware < 1.19.0
dell inspiron 15 5582 firmware < 2.13.0
dell inspiron 15 7572 firmware < 1.10.0
dell inspiron 17 7773 firmware < 1.16.0
dell inspiron 15 gaming 7577 firmware < 1.19.0
dell inspiron 3470 firmware < 2.21.0
dell inspiron 3471 firmware < 1.9.0
dell inspiron 3480 firmware < 1.17.0
dell inspiron 3481 firmware < 1.16.0
dell inspiron 3490 firmware < 1.16.0
dell inspiron 3493 firmware < 1.19.0
dell inspiron 3501 firmware < 1.11.0
dell inspiron 3511 firmware < 1.8.0
dell inspiron 3576 firmware < 1.16.0
dell inspiron 3580 firmware < 1.17.0
dell inspiron 3581 firmware < 1.16.0
dell inspiron 3590 firmware < 1.16.0
dell inspiron 3593 firmware < 1.19.0
dell inspiron 3670 firmware < 2.21.0
dell inspiron 3671 firmware < 1.9.0
dell inspiron 3780 firmware < 1.17.0
dell inspiron 3781 firmware < 1.16.0
dell inspiron 3790 firmware < 1.16.0
dell inspiron 3793 firmware < 1.19.0
dell inspiron 3880 firmware < 1.8.2
dell inspiron 3881 firmware < 1.8.3
dell inspiron 3891 firmware < 1.4.1
dell inspiron 3910 firmware < 1.1.66
dell inspiron 5300 firmware < 1.10.0
dell inspiron 5301 firmware < 1.12.0
dell inspiron 5310 firmware < 2.6.1
dell inspiron 5370 firmware < 1.21.0
dell inspiron 5390 firmware < 1.15.0
dell inspiron 5391 firmware < 1.16.0
dell inspiron 5400 firmware < 1.8.0
dell inspiron 5400 2-in-1 firmware < 1.10.0
dell inspiron 5401 firmware < 1.10.0
dell inspiron 5401 aio firmware < 1.8.0
dell inspiron 5402 firmware < 1.9.0
dell inspiron 5406 2-in-1 firmware < 1.11.1
dell inspiron 5408 firmware < 1.10.0
dell inspiron 5409 firmware < 1.9.0
dell inspiron 5410 firmware < 2.6.1
dell inspiron 5410 2-in-1 firmware < 2.6.1
dell inspiron 5480 firmware < 2.13.0
dell inspiron 5481 firmware < 2.13.0
dell inspiron 5482 firmware < 2.13.0
dell inspiron 5490 firmware < 1.17.0
dell inspiron 5490 aio firmware < 1.13.0
dell inspiron 5491 2-in-1 firmware < 1.13.0
dell inspiron 5493 firmware < 1.19.0
dell inspiron 5494 firmware < 1.16.0
dell inspiron 5498 firmware < 1.17.0
dell inspiron 5501 firmware < 1.10.0
dell inspiron 5502 firmware < 1.9.0
dell inspiron 5508 firmware < 1.10.0
dell inspiron 5509 firmware < 1.9.0
dell inspiron 5510 firmware < 2.6.1
dell inspiron 5570 firmware < 1.8.0
dell inspiron 5580 firmware < 2.13.0
dell inspiron 5583 firmware < 1.17.0
dell inspiron 5584 firmware < 1.17.0
dell inspiron 5590 firmware < 1.17.0
dell inspiron 5591 2-in-1 firmware < 1.13.0
dell inspiron 5593 firmware < 1.19.0
dell inspiron 5594 firmware < 1.16.0
dell inspiron 5598 firmware < 1.17.0
dell inspiron 5770 firmware < 1.8.0
dell inspiron 7000 firmware < 1.16.0
dell inspiron 7300 firmware < 1.12.0
dell inspiron 7300 2-in-1 firmware < 1.6.0
dell inspiron 7306 2-in-1 firmware < 1.11.1
dell inspiron 7370 firmware < 1.22.0
dell inspiron 7373 firmware < 1.22.0
dell inspiron 7380 firmware < 1.16.0
dell inspiron 7386 firmware < 1.13.0
dell inspiron 7390 firmware < 1.16.0
dell inspiron 7391 firmware < 1.14.0
dell inspiron 7400 firmware < 1.12.0
dell inspiron 7472 firmware < 1.10.0
dell inspiron 7490 firmware < 1.11.0
dell inspiron 7500 firmware < 1.11.0
dell inspiron 7500 2-in-1 firmware < 1.6.0
dell inspiron 7501 firmware < 1.11.0
dell inspiron 7506 2-in-1 firmware < 1.11.1
dell inspiron 7510 firmware < 1.4.0
dell inspiron 7570 firmware < 1.22.0
dell inspiron 7573 firmware < 1.22.0
dell inspiron 7580 firmware < 1.16.0
dell inspiron 7586 firmware < 1.13.0
dell inspiron 7590 firmware < 1.16.0
dell inspiron 7591 firmware < 1.13.0
dell inspiron 7610 firmware < 1.4.0
dell inspiron 7700 aio firmware < 1.8.0
dell inspiron 7706 2-in-1 firmware < 1.11.1
dell inspiron 7786 firmware < 1.13.0
dell inspiron 7790 firmware < 1.13.0
dell inspiron 7791 firmware < 1.14.0
dell inspiron 5491 aio firmware < 1.13.0
dell latitude 3380 firmware < 1.17.1
dell latitude 3120 firmware < 1.6.0
dell latitude 3180 firmware < 1.18.0
dell latitude 3189 firmware < 1.18.0
dell latitude 3190 firmware < 1.18.0
dell latitude 3190 2-in-1 firmware < 1.18.0
dell latitude 3300 firmware < 1.14.0
dell latitude 3310 firmware < 1.13.0
dell latitude 3301 firmware < 1.19.0
dell latitude 3310 2-in-1 firmware < 1.12.0
dell latitude 3320 firmware < 1.8.2
dell latitude 3379 firmware < 1.0.33
dell latitude 3390 firmware < 1.18.1
dell latitude 3400 firmware < 1.21.0
dell latitude 3410 firmware < 1.12.0
dell latitude 3420 firmware < 1.14.1
dell latitude 3470 firmware < 1.23.0
dell latitude 3490 firmware < 1.18.0
dell latitude 3500 firmware < 1.21.0
dell latitude 3510 firmware < 1.12.0
dell latitude 3520 firmware < 1.14.1
dell latitude 3570 firmware < 1.23.0
dell latitude 3590 firmware < 1.18.0
dell latitude 5175 firmware < 1.13.0
dell latitude 5179 firmware < 1.13.0
dell latitude 5280 firmware < 1.23.1
dell latitude 5285 2-in-1 firmware < 1.16.0
dell latitude 5288 firmware < 1.23.1
dell latitude 5289 firmware < 1.26.1
dell latitude 5290 firmware < 1.20.0
dell latitude 5290 2-in-1 firmware < 1.19.0
dell latitude 5300 firmware < 1.19.0
dell latitude 5300 2-in-1 firmware < 1.19.0
dell latitude 5310 firmware < 1.10.1
dell latitude 5310 2-in-1 firmware < 1.10.1
dell latitude 5320 firmware < 1.15.2
dell latitude 5400 firmware < 1.15.0
dell latitude 5401 firmware < 1.17.0
dell latitude 5410 firmware < 1.10.0
dell latitude 5411 firmware < 1.10.0
dell latitude 5414 rugged firmware < 1.33.0
dell latitude 5420 firmware < 1.15.1
dell latitude 5420 rugged firmware < 1.16.0
dell latitude 5424 rugged firmware < 1.16.0
dell latitude 5480 firmware < 1.23.1
dell latitude 5488 firmware < 1.23.1
dell latitude 5490 firmware < 1.20.0
dell latitude 5491 firmware < 1.18.0
dell latitude 5495 firmware < 1.6.0
dell latitude 5500 firmware < 1.15.0
dell latitude 5501 firmware < 1.17.0
dell latitude 5510 firmware < 1.10.0
dell latitude 5511 firmware < 1.10.0
dell latitude 5520 firmware < 1.15.2
dell latitude 5521 firmware < 1.8.0
dell latitude 5580 firmware < 1.23.1
dell latitude 5590 firmware < 1.20.0
dell latitude 5591 firmware < 1.18.0
dell latitude 7200 2-in-1 firmware < 1.16.1
dell latitude 7210 2-in-1 firmware < 1.11.0
dell latitude 7212 rugged extreme tablet firmware < 1.37.0
dell latitude 7214 firmware < 1.33.0
dell latitude 7220 rugged extreme tablet firmware < 1.17.0
dell latitude 7220ex rugged extreme tablet firmware < 1.17.0
dell latitude 7275 2-in-1 firmware < 1.13.0
dell latitude 7280 firmware < 1.24.1
dell latitude 7285 firmware < 1.14.0
dell latitude 7290 firmware < 1.23.0
dell latitude 7300 firmware < 1.17.0
dell latitude 7310 firmware < 1.11.0
dell latitude 7320 firmware < 1.14.1
dell latitude 7320 detachable firmware < 1.9.0
dell latitude 7370 firmware < 1.27.3
dell latitude 7380 firmware < 1.24.1
dell latitude 7389 firmware < 1.26.1
dell latitude 7390 firmware < 1.23.0
dell latitude 7390 2-in-1 firmware < 1.22.0
dell latitude 7400 firmware < 1.17.0
dell latitude 7400 2-in-1 firmware < 1.15.1
dell latitude 7410 firmware < 1.11.0
dell latitude 7414 rugged extreme firmware < 1.33.0
dell latitude 7420 firmware < 1.14.1
dell latitude 7424 rugged extreme firmware < 1.16.0
dell latitude 7480 firmware < 1.24.1
dell latitude 7490 firmware < 1.23.0
dell latitude 7520 firmware < 1.14.1
dell latitude 9410 firmware < 1.11.0
dell latitude 9420 firmware < 1.8.0
dell latitude 9510 firmware < 1.9.0
dell latitude 9520 firmware < 1.10.1
dell latitude e5270 firmware < 1.29.4
dell latitude e5470 firmware < 1.29.4
dell latitude e5570 firmware < 1.29.4
dell latitude e7270 firmware < 1.32.4
dell latitude e7470 firmware < 1.32.4
dell latitude rugged 5430 firmware < 1.4.1
dell latitude rugged 7330 firmware < 1.4.1
dell latitude 5421 firmware < 1.10.0
dell optiplex 3040 firmware < 1.18.1
dell optiplex 3046 firmware < 1.15.0
dell optiplex 3050 firmware < 1.19.0
dell optiplex 3050 aio firmware < 1.20.0
dell optiplex 3060 firmware < 1.17.0
dell optiplex 3070 firmware < 1.12.0
dell optiplex 3080 firmware < 2.8.1
dell optiplex 3090 firmware < 2.1.1
dell optiplex 3090 ultra firmware < 1.7.0
dell optiplex 3240 all-in-one firmware < 1.15.0
dell optiplex 3280 all-in-one firmware < 1.11.0
dell optiplex 5040 firmware < 1.21.0
dell optiplex 5050 firmware < 1.19.0
dell optiplex 5055 firmware < 1.6.2
dell optiplex 5060 firmware < 1.17.0
dell optiplex 5070 firmware < 1.12.0
dell optiplex 5080 firmware < 1.8.2
dell optiplex 5090 firmware < 1.4.3
dell optiplex 5250 firmware < 1.20.0
dell optiplex 5260 all-in-one firmware < 1.17.0
dell optiplex 5270 all-in-one firmware < 1.12.0
dell optiplex 5480 all-in-one firmware < 1.12.0
dell optiplex 5490 aio firmware < 1.7.0
dell optiplex 7040 firmware < 1.22.0
dell optiplex 7050 firmware < 1.19.0
dell optiplex 7060 firmware < 1.17.0
dell optiplex 7070 firmware < 1.12.0
dell optiplex 7070 ultra firmware < 1.11.1
dell optiplex 7071 firmware < 1.12.0
dell optiplex 7080 firmware < 1.8.2
dell optiplex 7090 firmware < 1.6.1
dell optiplex 7090 ultra firmware < 1.7.2
dell optiplex 7440 aio firmware < 1.18.0
dell optiplex 7450 firmware < 1.20.0
dell optiplex 7460 firmware < 1.17.0
dell optiplex 7470 all-in-one firmware < 1.12.0
dell optiplex 7480 all-in-one firmware < 1.12.0
dell optiplex 7490 all-in-one firmware < 1.7.0
dell optiplex 7760 aio firmware < 1.17.0
dell optiplex 7770 all-in-one firmware < 1.12.0
dell optiplex 7780 all-in-one firmware < 1.12.0
dell optiplex xe3 firmware < 1.17.0
dell precision 3240 compact firmware < 1.9.1
dell precision 3420 tower firmware < 2.20.0
dell precision 3430 tower firmware < 1.17.0
dell precision 3431 tower firmware < 1.12.0
dell precision 3440 firmware < 1.8.2
dell precision 3450 firmware < 1.4.2
dell precision 3510 firmware < 1.29.4
dell precision 3520 firmware < 1.23.1
dell precision 3530 firmware < 1.18.0
dell precision 3540 firmware < 1.15.0
dell precision 3541 firmware < 1.17.0
dell precision 3550 firmware < 1.10.0
dell precision 3551 firmware < 1.10.0
dell precision 3560 firmware < 1.15.2
dell precision 3561 firmware < 1.8.0
dell precision 3620 tower firmware < 2.20.0
dell precision 3630 tower firmware < 2.12.0
dell precision 3640 tower firmware < 1.11.1
dell precision 3650 tower firmware < 1.7.0
dell precision 3930 rack firmware < 2.16.1
dell precision 5510 firmware < 1.20.0
dell precision 5520 firmware < 1.26.0
dell precision 5530 firmware < 1.23.0
dell precision 5530 2-in-1 firmware < 1.23.0
dell precision 5540 firmware < 1.15.0
dell precision 5550 firmware < 1.12.0
dell precision 5560 firmware < 1.7.0
dell precision 5750 firmware < 1.12.0
dell precision 5760 firmware < 1.6.0
dell precision 5820 tower firmware < 2.14.0
dell precision 7520 firmware < 1.23.1
dell precision 7530 firmware < 1.19.0
dell precision 7540 firmware < 1.17.0
dell precision 7550 firmware < 1.12.0
dell precision 7560 firmware < 1.10.1
dell precision 7710 firmware < 1.25.3
dell precision 7720 firmware < 1.23.1
dell precision 7730 firmware < 1.19.0
dell precision 7740 firmware < 1.17.0
dell precision 7750 firmware < 1.12.0
dell precision 7760 firmware < 1.10.1
dell precision 7920 tower firmware < 2.18.0
dell precision 7820 tower firmware < 2.18.0
dell vostro 15 7570 firmware < 1.16.0
dell vostro 15 7580 firmware < 1.19.0
dell vostro 3070 firmware < 2.21.0
dell vostro 3267 firmware < 1.19.0
dell vostro 3268 firmware < 1.19.0
dell vostro 3400 firmware < 1.11.0
dell vostro 3401 firmware < 1.11.0
dell vostro 3468 firmware < 3.11.0
dell vostro 3470 firmware < 2.21.0
dell vostro 3471 firmware < 1.9.0
dell vostro 3478 firmware < 1.16.0
dell vostro 3480 firmware < 1.17.0
dell vostro 3481 firmware < 1.16.0
dell vostro 3490 firmware < 1.16.0
dell vostro 3500 firmware < 1.11.0
dell vostro 3501 firmware < 1.11.0
dell vostro 3510 firmware < 1.8.0
dell vostro 3568 firmware < 3.11.0
dell vostro 3578 firmware < 1.16.0
dell vostro 3580 firmware < 1.17.0
dell vostro 3581 firmware < 1.16.0
dell vostro 3583 firmware < 1.17.0
dell vostro 3584 firmware < 1.16.0
dell vostro 3590 firmware < 1.16.0
dell vostro 3660 firmware < 1.19.0
dell vostro 3667 firmware < 1.19.0
dell vostro 3668 firmware < 1.19.0
dell vostro 3669 firmware < 1.19.0
dell vostro 3670 firmware < 2.21.0
dell vostro 3671 firmware < 1.9.0
dell vostro 3681 firmware < 2.8.2
dell vostro 3690 firmware < 1.4.1
dell vostro 3710 firmware < 1.1.66
dell vostro 3881 firmware < 2.8.2
dell vostro 3888 firmware < 2.8.2
dell vostro 3890 firmware < 1.4.1
dell vostro 3910 firmware < 1.1.66
dell vostro 5090 firmware < 2.8.2
dell vostro 5300 firmware < 2.8.2
dell vostro 5301 firmware < 1.12.0
dell vostro 5310 firmware < 2.6.1
dell vostro 5370 firmware < 1.21.0
dell vostro 5390 firmware < 1.15.0
dell vostro 5391 firmware < 1.16.0
dell vostro 5401 firmware < 1.10.0
dell vostro 5402 firmware < 1.9.0
dell vostro 5410 firmware < 2.6.1
dell vostro 5468 firmware < 1.18.0
dell vostro 5471 firmware < 1.21.0
dell vostro 5481 firmware < 2.13.0
dell vostro 5490 firmware < 1.17.0
dell vostro 5491 firmware < 1.19.0
dell vostro 5501 firmware < 1.10.0
dell vostro 5502 firmware < 1.9.0
dell vostro 5510 firmware < 2.6.1
dell vostro 5568 firmware < 1.18.0
dell vostro 5581 firmware < 2.13.0
dell vostro 5590 firmware < 1.17.0
dell vostro 5591 firmware < 1.19.0
dell vostro 5880 firmware < 1.8.2
dell vostro 5890 firmware < 1.4.0
dell vostro 7500 firmware < 1.11.0
dell vostro 7510 firmware < 1.4.0
dell vostro 7590 firmware < 1.13.0
dell wyse 5070 firmware < 1.16.0
dell wyse 5470 firmware < 1.12.0
dell wyse 5470 all-in-one firmware < 1.14.1
dell wyse 7040 thin client firmware < 1.14.0
dell xps 13 9305 firmware < 1.3.0
dell xps 13 9310 firmware < 3.4.0
dell xps 13 9310 2-in-1 firmware < 2.7.0
dell xps 13 9360 firmware < 2.19.0
dell xps 13 9365 firmware < 2.19.0
dell xps 13 9370 firmware < 1.18.0
dell xps 13 9380 firmware < 1.17.0
dell xps 15 7590 firmware < 1.23.0
dell xps 15 9500 firmware < 1.12.0
dell xps 15 9510 firmware < 1.7.0
dell xps 15 9575 2-in-1 firmware < 1.19.0
dell xps 17 9700 firmware < 1.12.0
dell xps 17 9710 firmware < 1.6.0
dell xps 27 7760 firmware < 2.13.0
dell xps 7590 firmware < 1.15.0
dell xps 8940 firmware < 2.4.0

A rung lights from a row in the index, never from an assessment. "Held sources" is the true scope of the claim: this index reads the CVE record, NVD, CISA KEV, FIRST's EPSS and public proof-of-concept repositories, and it does not observe attacks.

Unaudited dollar value2 of 3 inputs carry a receipt
Exposure$9,730over the next 30 days, if this record is yours
Movementno material movementthe record holds only daily drift and scoring model releases
Basisassumeda published average, not your estate

$9,730 = $4.99M incident cost x 1 exposure x 0.00195 likelihood

udv@v1 · unaudited · wrong for you until you say what you run

$4.99M is the cost of a breach that happened, from IBM Cost of a Data Breach Report 2026, global average. It is not the value of any asset of yours. That average already covers breaches of every severity, so scaling it by exposure understates a partial-impact record. That is an assumption, not a measurement. Your own asset value goes in the decision record.

Did this affect your environment?Answering needs an account.

Attack path

Local accessrequires high privilegesDell CPG BIOSCWE-121 weaknessAdjacent componentsscope changeFull compromise (C/I/A)C:H / I:H / A:Hexploits CWE-121scope changedata compromise

What it is stated by the CNA

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM. receipt

NVD's analysis a second authority

severity
7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
weakness
CWE-121; CWE-787
affected versions
dell alienware m15 r6 firmware < 1.8.0; dell chengming 3980 firmware < 2.21.0; dell chengming 3988 firmware < 1.9.0; and 396 more, listed in full below
also scored by
security_alert@emc.com 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

The CNA scored it 7.5 and NVD 7.8. Both are shown because both were published; we do not pick one.

check it yourself dell.com receipt

Movement the material steps

7 Sep 20220.02559
7 Mar 20234.2e-4 · scoring model v2023.03.01
17 Mar 20250.00015 · scoring model v2025.03.14
15 Jun 20260.00171 · scoring model v2026.06.15
3 Sep 20260.00195

This score more than doubled inside 72 hours. Both observations are in the full history below.

Show all 17 observations
7 Sep 20220.02559
15 Sep 20220.01036
7 Mar 20234.2e-4
8 Mar 20230.00042
10 Jun 20230.00060
17 Mar 20250.00015
19 Mar 20250.00018
29 Mar 20250.00025
30 Mar 20250.00018
3 Jul 20250.0002
7 Sep 20250.00042
8 Sep 20250.00103
16 Sep 20250.00052
15 Jun 20260.00171
17 Jun 20260.00181
12 Aug 20260.00183
3 Sep 20260.00195

17 observations held. A highlighted step crossed a promotion threshold. A step marked with a scoring model moved because the instrument was replaced, not because the vulnerability changed. receipt

The full biography

EPSS 0.00195Published2022-09-06Index as of2026-09-03

Exploit probability more than doubled between 2025-09-07 and 2025-09-08 (0.00042 → 0.00103) and the record had been public for 3 years, 11 months when this index was last written.

Published 2022-09-06 receipt · Index as of 2026-09-03 derived

The pattern, elsewhere

This record is one instance of CWE-121, stack-based buffer overflow. The index holds 4004 prior instances of this class, 20 KEV-listed. The nearest of its KEV-listed records are drawn beside this. cwe-consequences@4.20

CVE-2025-0282 · Ivanti Connect Securematches 7 of 10KEV listed · 2025receipt
CVE-2025-22457 · Ivanti Connect Securematches 7 of 10KEV listed · 2025receipt
CVE-2022-20700 · Cisco Small Business RV Series Router Firmwarematches 6 of 10KEV listed · 2022receipt
CVE-2022-20701 · Cisco Small Business RV Series Router Firmwarematches 6 of 10KEV listed · 2022receipt
CVE-2021-20038 · SonicWall SMA100matches 5 of 10KEV listed · 2021receipt
CVE-2021-27137 · DD-WRTmatches 5 of 10KEV listed · 2026receipt

"Matches n of m" counts the attributes the two records can both be compared on: the CVSS metrics they share a version of, any weakness class beyond this one, and the vendor. fit-rules@v1

4004 records in this class held. The six above are drawn from the ones CISA has listed as exploited, ranked by how much of the record matches this one. That is why every one of them is KEV-listed: the pool is, so the colour on those spokes says nothing the pool has not already said.

No curated product neighbourhood is held for this product, so the records above are the nearest this index can name. The neighbourhood table covers a small set of products and is extended by hand.

Siblings and hubs

Records related to this one

No record cites this identifier and it carries no alias. Its defect family is below.

Its defect family

dell cpg bios

CVE-2022-31226CVE-2022-32493CVE-2022-34401CVE-2022-34403

Grouped by shared product and weakness, not by shared vulnerability. Each record's own state is on its own page.

Family membership: held values

The whole family, and what merged it

Nothing we hold separates this record from the others in its defect family. This page is kept and dated, and the defect family's own page is the one we offer for indexing: the whole group.

Browse the index from here

Every CVE we hold for DellAdded to CISA KEV this weekThe whole index

These are index-wide views, not findings about CVE-2022-26860.

What usually comes next

Brief on CVE-2022-26860Held facts, dated and print-ready. Sign in to add the researched section.What moved across the whole index this week?The material set, not the catalogue.Do we run Dell CPG BIOS?Match a product list against what we hold. Product names, not versions.

Everything above needs no account. What is below is work: assembling it, scoping it to your estate, watching it, and handing it to someone else.

Everything on this page is free. Public data. Withholding it protects nothing.