CVE-2026-8863
CVE-2026-8863
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Oracle Corporation OracleLinux(7.2) shim
0.9
- PC-Doctor Service Center Enterprise
From 14 · through 17.0.7536.900
- PC-Doctor Service Center Drive Erase
From 15 · through 17.0.7538.592
- PC-Doctor Service Center Japan
From 15 · through 17.0.7539.904
- PC-Doctor Service Center
From 14 · through 17.0.7535.900
- PC-Doctor Network Factory for Linux (Bootable Diagnostics)
From 6.9 · through 6.20.7711.267
- PC-Doctor Factory for Linux (Bootable Diagnostics)
From 6.9 · through 6.20.7710.267
- Spyrus WTGCreator
4.2
- Blancco UK WhiteCanyon WipeDrive
From 8.0.0 · through 8.1.3
- baramundi software baramundi Management Suite
through 2024R1
- SUSE Linux OpenSUSE shim
0.9
- Finland Matriculation Board Abitti 1
1.0.0
- NTC IT ROSA LLC RosaLinux
R9
- NTC IT ROSA LLC RosaLinux
R10