CVE-2026-8863: high-severity vulnerability in baramundi Management Suite
CVE-2026-8863
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.8epss 0.1%
from disclosure to weapon42 days
Published on NVDJun 9
1st PoC+42d
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
baramundi software · baramundi Management SuiteBlancco UK · WhiteCanyon WipeDriveFinland Matriculation Board · Abitti 1NTC IT ROSA LLC · RosaLinuxOracle Corporation · OracleLinux(7.2) shimPC-Doctor · Factory for Linux (Bootable Diagnostics)PC-Doctor · Network Factory for Linux (Bootable Diagnostics)PC-Doctor · Service CenterPC-Doctor · Service Center Drive ErasePC-Doctor · Service Center EnterprisePC-Doctor · Service Center JapanSpyrus · WTGCreatorSUSE Linux · OpenSUSE shimpublic PoCs found — 1
githubgithub.com/0xbekoo/CVE-2026-8863★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.