{"vulnerability": "cve-2026-4063", "sightings": [{"uuid": "d3bf7f52-5e54-4126-a508-9da229135028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40630", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "7c4ccf17-b88d-4e85-a839-a56033edc898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40630", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mk77ucziwa2c", "content": "", "creation_timestamp": "2026-04-24T00:00:41.363234Z"}, {"uuid": "955b838c-50df-4332-b510-25d4fa0bd3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40630", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116456740508441594", "content": "", "creation_timestamp": "2026-04-24T00:00:42.780728Z"}, {"uuid": "9627cd46-eefc-4cbd-9616-195cd14afb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40630", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbmyb5afs2k", "content": "", "creation_timestamp": "2026-04-24T23:00:51.714599Z"}, {"uuid": "40ecf0c5-c311-4ff5-8f54-fd734a8ff7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40630", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mkbmycbz5f2w", "content": "", "creation_timestamp": "2026-04-24T23:00:52.445540Z"}, {"uuid": "82b91ee0-62f8-43d6-aba5-b51bb2ff0c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40630", "type": "seen", "source": "Telegram/S8ox9UMDIAxfwdU4Vdf7uPBMfOmVZYt0JmzSEaP85k3wGMs", "content": "", "creation_timestamp": "2026-04-24T01:18:04.000000Z"}, {"uuid": "b41fd039-2e68-4ba2-ad32-abee97c1a6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40636", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mll2y7rqub2d", "content": "Dell ECS & ObjectScale face a CRITICAL bug (hard-coded creds, CVSS 9.8). Local attackers could gain full system access. Restrict access & monitor closely until Dell issues a fix. https://radar.offseq.com/threat/cve-2026-40636-cwe-798-use-of-hard-coded-credentia-8faf08fe #OffSeq #Dell #Security", "creation_timestamp": "2026-05-11T10:30:31.810198Z"}, {"uuid": "a9a0ae2e-99dc-4155-9f11-c5682dd141fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40636", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116555476431173133", "content": "\ud83d\udea8 CRITICAL: CVE-2026-40636 in Dell ECS & ObjectScale (CVSS 9.8) exposes systems via hard-coded credentials. Local attackers may gain full access. Restrict local access & monitor logs. Await vendor patch. Details: https://radar.offseq.com/threat/cve-2026-40636-cwe-798-use-of-hard-coded-credentia-8faf08fe #OffSeq #Dell #Vuln #InfoSec", "creation_timestamp": "2026-05-11T10:31:32.915311Z"}, {"uuid": "8b1d4ab9-9cc6-49dd-a785-2de0abf9bbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mll3qnctcf2k", "content": "CVE-2026-40636 - Dell ECS Hard-Coded Credentials Disclosure\nCVE ID : CVE-2026-40636\n \n Published : May 11, 2026, 10:16 a.m. | 14\u00a0minutes ago\n \n Description : Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0,\u00a0contains a use of hard-coded ...", "creation_timestamp": "2026-05-11T10:44:11.768070Z"}, {"uuid": "da3e02a3-a361-4cc5-929f-36047471dfee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40636", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116555868168543714", "content": "A severe vulnerability was disclosed for Dell ECS and ObjectScale (CVE-2026-40636) https://vuldb.com/vuln/362603", "creation_timestamp": "2026-05-11T12:10:07.810144Z"}, {"uuid": "081e1731-82c0-46de-87e0-1c0e91099ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40636", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllbl6lado2t", "content": "\ud83d\udd34 CVE-2026-40636 - Critical (9.8)\n\nDell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0,\u00a0contai...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40636/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T12:28:30.132217Z"}, {"uuid": "70919e48-e39e-4dbe-ae2e-b09a8c0c56d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40636", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116557578982936259", "content": "Attention, elevated activities detected targeting Dell ECS and ObjectScale (CVE-2026-40636) https://vuldb.com/vuln/362603/cti", "creation_timestamp": "2026-05-11T19:25:11.729874Z"}, {"uuid": "1cc5c7a0-f4d3-4395-b9fb-4f470fa26075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40638", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo4ohqfcm2k", "content": "CVE-2026-40638 - Dell PowerScale InsightIQ Execution of Code with Unnecessary Privileges\nCVE ID : CVE-2026-40638\n \n Published : May 12, 2026, 2:17 p.m. | 13\u00a0minutes ago\n \n Description : Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unneces...", "creation_timestamp": "2026-05-12T15:39:00.031856Z"}, {"uuid": "0ba17255-6766-4c6d-9a87-71dc4281bce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40631", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/f5-products-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "00c5cff0-ea4f-4bb9-a73c-79bce3ba8eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40630", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpcmtzjxoj2y", "content": "\ud83d\udccc CVE-2026-40630 - A vulnerability in\u00a0\nSenseLive \n\nX3050\u2019s web management interface allows unauthorized access to certain configuration endpoints due to improper access ... https://www.cyberhub.blog/cves/CVE-2026-40630", "creation_timestamp": "2026-06-27T23:37:06.529604Z"}, {"uuid": "333a6b07-3a88-4d88-82b3-3358f7427a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqdzkirt2z2k", "content": "Dell\u306eBIOS\u6b20\u9665\u3001SPI\u30d5\u30e9\u30c3\u30b7\u30e5\u304b\u3089\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5fa9\u5143\u53ef\u80fd\u306b\n\nDell\u304cBIOS\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u304a\u3088\u3073\u30e6\u30fc\u30b6\u30fc\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fdd\u5b58\u3059\u308b\u65b9\u5f0f\u306b\u95a2\u3057\u3066\u3001\u65b0\u305f\u306b\u91cd\u5927\u306a\u6b20\u9665\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d5\u30e9\u30c3\u30b7\u30e5\u30c0\u30f3\u30d7\u304b\u3089\u308f\u305a\u304b\u6570\u30df\u30ea\u79d2\u3067\u5e73\u6587\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5b8c\u5168\u306b\u5fa9\u5143\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 CVE-2026-40639(DSA-2026-197)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u554f\u984c\u306f\u3001\u6697\u53f7\u5b66\u7684\u30cf\u30c3\u30b7\u30e5\u3067\u306f", "creation_timestamp": "2026-07-11T06:22:17.452252Z"}, {"uuid": "d86e64fa-5cde-489d-adff-500d43689482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mqf7fj763y2u", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-11T17:39:31.952664Z"}, {"uuid": "2fd8a7a5-1844-4e9b-b63a-0d9e0cbdd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40639", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907368666921137", "content": "\ud83d\udcf0 Critical Dell BIOS Flaw Allows Plaintext Password Recovery in Milliseconds\n\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/dell-bios-flaw-cve-2026-40639-instant-password-recovery/?utm_source=mastodon\u2026", "creation_timestamp": "2026-07-12T14:01:19.301454Z"}, {"uuid": "d6ba2f05-438a-4629-85b5-8b3bf969a956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpgrkyp25", "content": "\ud83d\udd12 Critical Dell BIOS flaw (CVE-2026-40639) allows instant recovery of admin passwords from SPI flash due to weak XOR encryption. Affects numerous Latitude, XPS & Wyse models. Physical access is all that's needed. Patch now! #Dell #BIOS #Vulnerabilit...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:01:59.692874Z"}, {"uuid": "b2e5c1c1-4616-4c50-9de1-dff71a18e84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mqjfpii7dr2y", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-13T09:43:08.324237Z"}, {"uuid": "42bacecc-93cf-4ad0-a550-9fd3ffd43ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqjgdvgbpv2c", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-13T09:54:32.708919Z"}, {"uuid": "75b3fe0a-cc41-4071-964a-aa94c3adf59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mqjy5rqy5v27", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n blog.amberwolf.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-13T15:13:14.796738Z"}, {"uuid": "d1d57ce9-a986-45d5-ba9f-72aad3024aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mqllxw4ibn2b", "content": "Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)", "creation_timestamp": "2026-07-14T06:40:32.750335Z"}, {"uuid": "e30f02b1-dd78-47fc-a362-aeef9444d02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40633", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoqokvbcy2b", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-40633](https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-...\nhttps://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities #PatchManagement #Vulnerability #C", "creation_timestamp": "2026-07-15T12:42:46.891850Z"}, {"uuid": "901bd160-281e-490e-b51e-d165d63a91e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqou66ize32w", "content": "CVE-2026-40633 - Dell PowerScale OneFS Information Disclosure Vulnerability\nCVE ID : CVE-2026-40633\n \n Published : July 15, 2026, 11:16 a.m. | 16\u00a0minutes ago\n \n Description : Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains a...", "creation_timestamp": "2026-07-15T13:45:12.062090Z"}, {"uuid": "581008e5-01b2-45aa-9282-0e4d8d715202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mqpcgucbo72o", "content": "BIOS Dell, cifratura XOR debole permette il recupero delle password\nTutti i dettagli sulla vulnerabilit\u00e0 CVE-2026-40639: con alcuni BIOS Dell, la password usata a protezione del sistema ris...\nhttps://www.ilsoftware.it/password-bios-dell-recuperabili/", "creation_timestamp": "2026-07-15T18:00:35.581223Z"}, {"uuid": "7d7a6403-859b-4fb0-a656-0dce9841cd79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrp2kyeknk26", "content": "[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)\n\n\n www.mdsec.co.uk -> \n\n\nOriginal->", "creation_timestamp": "2026-07-28T09:04:55.830316Z"}]}