CVE-2026-63693

Published Aug 24, 2026 CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Description

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

Analysis

Technical impact

Dell Client BIOS contains an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged attacker with local access could exploit this flaw to perform an arbitrary write to arbitrary files on the system.

Affected Systems

Affected Dell computer models include Aurora R16, Alienware Area 51m R2, Alienware Area-51 AAT2265, Aurora R13, Aurora R15, Aurora R15 AMD, Aurora Ryzen Edition R14, m15 R3, m15 R4, m17 R3, m17 R4, x15 R1, x17 R1, Inspiron 15 3510, Inspiron 15 3521, XPS 8950, and XPS 8960. No specific BIOS version numbers are provided; the issue applies to the BIOS firmware on these systems.

Risk and Exploitability

The CVSS score is 6.6, indicating moderate severity, and the EPSS score is not available. This vulnerability is listed in no KEV catalog. Based on the description, the attacker must have local access and low privileges, and the attack vector is inferred to be local. The exploit would allow an attacker to write to arbitrary locations before the BIOS performs file access.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Dell

Alienware Area 51m R2

unaffected

Version	Status	Constraints
`0`	affected	< 1.37.0

Dell

Alienware Area-51 AAT2265

unaffected

Version	Status	Constraints
`0`	affected	< 1.8.1

Dell

Alienware Aurora R13

unaffected

Version	Status	Constraints
`0`	affected	< 1.33.0

Dell

Alienware Aurora R15

unaffected

Version	Status	Constraints
`0`	affected	< 1.29.0

Dell

Alienware Aurora R15 AMD

unaffected

Version	Status	Constraints
`0`	affected	< 1.26.0

Dell

Alienware Aurora Ryzen Edition R14

unaffected

Version	Status	Constraints
`0`	affected	< 2.32.0

Dell

Alienware m15 R3

unaffected

Version	Status	Constraints
`0`	affected	< 1.37.0

Dell

Alienware m15 R4

unaffected

Version	Status	Constraints
`0`	affected	< 1.35.0

Dell

Alienware m17 R3

unaffected

Version	Status	Constraints
`0`	affected	< 1.37.0

Dell

Alienware m17 R4

unaffected

Version	Status	Constraints
`0`	affected	< 1.35.0

Dell

Alienware x15 R1

unaffected

Version	Status	Constraints
`0`	affected	< 1.34.0

Dell

Alienware x17 R1

unaffected

Version	Status	Constraints
`0`	affected	< 1.34.0

Dell

AURORA R16

unaffected

Version	Status	Constraints
`0`	affected	< 2.25.0

Dell

Inspiron 15 3510

unaffected

Version	Status	Constraints
`0`	affected	< 1.30.0

Dell

Inspiron 15 3521

unaffected

Version	Status	Constraints
`0`	affected	< 1.25.0

Dell

XPS 8950

unaffected

Version	Status	Constraints
`0`	affected	< 1.33.0

Dell

XPS 8960

unaffected

Version	Status	Constraints
`0`	affected	< 2.24.0

No data.

Vendor Product Versions

Dell

Alienware Area-51 Aat225

Version	Status	Scheme	Platform
`[0,1.8.1)`	affected	semver	—

Dell

Alienware Area 51m R2

Version	Status	Scheme	Platform
`[0,1.37.0)`	affected	semver	—

Dell

Alienware Aurora R13

Version	Status	Scheme	Platform
`[0,1.33.0)`	affected	semver	—

Dell

Alienware Aurora R15

Version	Status	Scheme	Platform
`[0,1.29.0)`	affected	semver	—

Dell

Alienware Aurora R15 Amd

Version	Status	Scheme	Platform
`[0,1.26.0)`	affected	semver	—

Dell

Alienware Aurora Ryzen Edition R14

Version	Status	Scheme	Platform
`[0,2.32.0)`	affected	semver	—

Dell

Alienware M15 R3

Version	Status	Scheme	Platform
`[0,1.37.0)`	affected	semver	—

Dell

Alienware M15 R4

Version	Status	Scheme	Platform
`[0,1.35.0)`	affected	semver	—

Dell

Alienware M17 R3

Version	Status	Scheme	Platform
`[0,1.37.0)`	affected	semver	—

Dell

Alienware M17 R4

Version	Status	Scheme	Platform
`[0,1.35.0)`	affected	semver	—

Dell

Alienware X15 R1

Version	Status	Scheme	Platform
`[0,1.34.0)`	affected	semver	—

Dell

Alienware X17 R1

Version	Status	Scheme	Platform
`[0,1.34.0)`	affected	semver	—

Dell

Aurora R16

Version	Status	Scheme	Platform
`[0,2.25.0)`	affected	semver	—

Dell

Inspiron 15 3510

Version	Status	Scheme	Platform
`[0,1.30.0)`	affected	semver	—

Dell

Inspiron 15 3521

Version	Status	Scheme	Platform
`[0,1.25.0)`	affected	semver	—

Dell

Xps 8950

Version	Status	Scheme	Platform
`[0,1.33.0)`	affected	semver	—

Dell

Xps 8960

Version	Status	Scheme	Platform
`[0,2.24.0)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Download the DSA-2026-280 BIOS update from Dell support and run the MSI installer on the affected system with administrative rights, following the on-screen prompts.
Reboot the system to complete the BIOS firmware update.
Set a secure BIOS administrator password to restrict unauthorized BIOS configuration changes.

Generated by OpenCVE AI on August 24, 2026 at 21:47 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.139% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability

History

Aug 27, 2026 6:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 24, 2026 9:45 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Dell Dell alienware Area-51 Aat225 Dell alienware Area 51m R2 Dell alienware Aurora R13 Dell alienware Aurora R15 Dell alienware Aurora R15 Amd Dell alienware Aurora Ryzen Edition R14 Dell alienware M15 R3 Dell alienware M15 R4 Dell alienware M17 R3 Dell alienware M17 R4 Dell alienware X15 R1 Dell alienware X17 R1 Dell aurora R16 Dell inspiron 15 3510 Dell inspiron 15 3521 Dell xps 8950 Dell xps 8960
Vendors & Products		Dell Dell alienware Area-51 Aat225 Dell alienware Area 51m R2 Dell alienware Aurora R13 Dell alienware Aurora R15 Dell alienware Aurora R15 Amd Dell alienware Aurora Ryzen Edition R14 Dell alienware M15 R3 Dell alienware M15 R4 Dell alienware M17 R3 Dell alienware M17 R4 Dell alienware X15 R1 Dell alienware X17 R1 Dell aurora R16 Dell inspiron 15 3510 Dell inspiron 15 3521 Dell xps 8950 Dell xps 8960

Aug 24, 2026 8:00 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write
Weaknesses		CWE-379
References		https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H'}`

Subscriptions

Dell Alienware Area-51 Aat225 Alienware Area 51m R2 Alienware Aurora R13 Alienware Aurora R15 Alienware Aurora R15 Amd Alienware Aurora Ryzen Edition R14 Alienware M15 R3 Alienware M15 R4 Alienware M17 R3 Alienware M17 R4 Alienware X15 R1 Alienware X17 R1 Aurora R16 Inspiron 15 3510 Inspiron 15 3521 Xps 8950 Xps 8960

Weaknesses