CVE-2026-6485: UEFI BIOS embedded Shell can be used to bypass Secure Boot
Published Sep 9, 2026
·Updated
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
Affected Software
1 affected component
UEFI BIOS embedded Shell
Event History
Sep 9, 2026
CVE Published
via MITRE·03:54 AM
Data Sourced
via MITRE·03:54 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require remote access or user interaction?
The CVSS vector indicates local access is required and no user interaction is needed. It also indicates the attacker must already have high privileges.
2
What level of impact is indicated if exploitation succeeds?
The reported vector rates confidentiality, integrity, and availability impacts as high, with scope changed.
3
What execution paths are identified for exploiting the issue?
The issue can be exploited through embedded Shell commands or startup scripts.