158 matches found
shim
shim, a first-stage UEFI bootloader shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage and StartImage calls. If these fail because Secure Boot is enabled and the binary is not sign...
incus-os
Introduction IncusOS is an immutable OS image dedicated to running Incus. It's based on Debian 13 and built using mkosi. IncusOS can be installed on modern amd64 x8664 and arm64 systems. This aims at providing a very fast, safe and reliable way to run an Incus server. It's got a strong focus on...
CVE-2026-8863
CVE-2026-8863 Collection of the signed UEFI Secure Boot shim binaries affected by CVE-2026-8863, with the embedded shim version, Authenticode signer and revocation hashes of each image. Releases that ship the byte-identical signed shim are collapsed onto a single row — one Authenticode hash is on...
CVE-2026-79298
🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boot Bypass in Howyar SysReturn A vulnerability was patched. A binary was revoked. But only half the architecture was fixed. Eighteen months later, the IA-32 boot path still carried the same custom PE loader, the same bypassed Secure Boot...
UEFI Secure Boot Bypass
The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
Secure Channel Privilege Escalation
The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
CVE-2026-72895
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
EUVD-2026-98389
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
CVE-2026-72895
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
CVE-2026-72895
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
CVE-2026-72895
A vulnerability exists in several SIMATIC IPC models, specifically SIMATIC IPC BX-21A (versions < V31.01.13), SIMATIC IPC RW-543A (versions < V1.1.4), and SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (versions
PT-2026-111388
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
CVE-2026-72895: Use of Default Cryptographic Key
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
Siemens SIMATIC IPCs
SUMMARY The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products...
Siemens SIMATIC IPC BX-21A Trust Management Vulnerability
The Siemens SIMATIC IPC BX-21A has a trust management vulnerability. This vulnerability stems from the presence of a BIOS vendor test key in the UEFI secure boot key database. This allows local attackers with physical or administrative access to use this test key to sign the operating system or...
Exploit for CVE-2026-79298
🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boo...
CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This includes 63...