CVE-2026-8863
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.8epss 0.1%
from disclosure to weapon42 days
Published on NVDJun 9
1st PoC+42d
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
baramundi software · baramundi Management SuiteBlancco UK · WhiteCanyon WipeDriveFinland Matriculation Board · Abitti 1NTC IT ROSA LLC · RosaLinuxOracle Corporation · OracleLinux(7.2) shimPC-Doctor · Factory for Linux (Bootable Diagnostics)PC-Doctor · Network Factory for Linux (Bootable Diagnostics)PC-Doctor · Service CenterPC-Doctor · Service Center Drive ErasePC-Doctor · Service Center EnterprisePC-Doctor · Service Center JapanSpyrus · WTGCreatorSUSE Linux · OpenSUSE shimpublic PoCs found — 1
githubgithub.com/0xbekoo/CVE-2026-8863★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.