CVE-2026-0893: Uncleared Password Keystrokes Vulnerability
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using AMI Aptio V are in scope. Exploitation requires local access and low-level privileges, so remote-only attackers are not described as able to exploit it directly.
What access does an attacker need to exploit the vulnerability?
The CVSS vector specifies local attack access, high attack complexity, no user interaction, and low privileges required. The provided information does not identify a specific configuration prerequisite.
What could successful exploitation allow?
Successful exploitation may expose sensitive information and can lead to privilege escalation. The advisory data also indicates potential effects on confidentiality, integrity, and availability.