What is the CVSS score of CVE-2025-7026?

CVE-2025-7026 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-7026?

Within 24 hours: Identify and inventory all systems running affected firmware versions and restrict local access to those systems. Within 7 days: Evaluate and test any available firmware updates or workarounds from the vendor; coordinate with your vendor for patch timelines if unavailable. Within 30 days: Deploy compensating controls including BIOS/UEFI hardening, disable SMI handlers if operationally feasible, implement enhanced physical security for affected systems, and establish monitoring for SMM-level anomalies.

CVE-2025-7026

EUVD-2025-21137 HIGH

2025-07-11 cret@cert.org

Privilege Escalation

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 08:18 euvd

EUVD-2025-21137

Analysis Generated

Mar 16, 2026 - 08:18 vuln.today

CVE Published

Jul 11, 2025 - 16:15 nvd

HIGH 8.2

DescriptionCVE.org

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise.