AMI

Related CVEsby mentions

• CVE-2026-331978.7<1%
  Privileged local BIOS code execution in AMI Aptio V (incomplete input validation)
  AMI's Aptio V UEFI BIOS firmware contains an input-validation flaw classified as CWE-184 (Incomplete List of Disallowed Inputs), meaning a BIOS code path fails to reject all inputs it is supposed to disallow. Triggering it requires local access to the machine, and the CVSS 4.0 metrics show the attacker must already hold high privileges (typically OS-level administrator), with no user interaction needed but elevated attack prerequisites that must be met. Successful exploitation yields arbitrary code execution in the firmware context with high impact on confidentiality, integrity and availability on the affected system and, per the scoring, potentially on subsequent systems - significant for BIOS because firmware-level compromise can persist across OS reinstalls. Any workstation, server or motherboard shipped with AMI Aptio V firmware by an OEM is in scope. No public proof-of-concept, CISA KEV listing, or known in-the-wild exploitation has been reported (EPSS 0.1%); a separate related AMI firmware issue (VU#718077, Secure Boot bypass via a UEFI Shell embedded in SPI flash) is also documented.
  · AMI (American Megatrends International) Aptio V (AptioV) UEFI BIOS firmwaremass
• CVE-2026-64858.2<1%
  Secure Boot bypass via embedded UEFI Shell in UEFI BIOS firmware (CVE-2026-6485)
  CVE-2026-6485 (CWE-489, active code left in production firmware) describes a UEFI Shell module embedded in the SPI Flash of affected UEFI BIOS images that can be used to bypass Secure Boot. An attacker with local access and high privileges (CVSS AV:L/PR:H) — for example a local administrator or someone with physical access — can run shell commands or execute startup scripts through the embedded shell, launching code that Secure Boot does not verify. The result is a break in the Secure Boot chain of trust, allowing unsigned or attacker-controlled code to run at boot (e.g., to install bootkit- or firmware-level persistence), which is why the CVSS scope is 'changed' (S:C) with high impact to confidentiality, integrity, and availability. Affected systems are those whose UEFI BIOS ships with this embedded UEFI Shell module in SPI Flash; the issue is tracked in CERT/CC VU#718077, but the exact vendor, product list, and version ranges are not specified in the available data. There is no known exploitation at this time: no public proof-of-concept exists, the issue is not in CISA KEV, and EPSS estimates only a 0.1% chance of exploitation in the next 30 days.
  · UEFI BIOS firmware with a UEFI Shell module embedded in SPI Flash
• CVE-2026-202937.1<1%
  Secure Boot Bypass via UEFI Shell in Cisco UCS Servers and UCS-based Appliances
  CVE-2026-20293 is a flaw in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances that lets an attacker bypass UEFI Secure Boot validation and run unauthorized software. It is triggered because memory-write commands remain available in the UEFI Shell even while Secure Boot is enabled: an attacker selects the UEFI Shell boot option at boot time and uses shell commands to modify UEFI memory variables and overwrite Secure Boot-related memory values. A successful exploit manipulates the preboot environment and allows execution of untrusted software that would normally be rejected by Secure Boot. Exploitation requires either physical access (no credentials needed) or valid credentials for an account with the user or admin role on the affected system, so practical exposure is limited to systems where an attacker has local access. No exploitation in the wild, public proof-of-concept, or KEV listing is known, and EPSS puts 30-day exploitation probability at about 0.1%.
  · Cisco UCS Servers (UEFI Shell implementation) · Cisco UCS-based appliances (UEFI Shell implementation)large

Appears with