[CVE-2026-40639]

July 13, 2026

• Dell BIOS passwords can be recovered from SPI flash (CVE-2026-40639) due to reversible XOR "encryption," enabling fast recovery of short passwords and partial recovery of longer ones — full BIOS control on physical access (AmberWolf). · Vulnerabilities & Exploits

in Russian Intelligence Turns IP Cameras and Routers Into a NATO Surveillance Grid

July 11, 2026

• Dell BIOS passwords stored in SPI flash use weak XOR encryption (CVE-2026-40639), allowing rapid offline recovery and full BIOS control once flash is dumped — a physical-access/evil-maid primitive. MDSec · Vulnerabilities & Exploits

in Progress Orders ShareFile Storage Controllers Offline Over Active Zero-Day Threat