CVE-2026-6485 PUBLISHED

UEFI BIOS embedded Shell can be used to bypass Secure Boot

Assigner: Insyde
Reserved: 17.04.2026 Published: 09.09.2026 Updated: 09.09.2026

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.2

Product Status

Vendor Insyde Software
Product InsydeH2O
Versions Default: unaffected
  • Version See in the Solution is affected

Solutions

Kernel 5.3: Version 05.3A.25 Kernel 5.4: Version 05.48.25 Kernel 5.5: Version 05.56.25 Kernel 5.6: Version 05.63.25

References

Problem Types

  • CWE-489: Active Debug Code CWE