EUVD-2026-74613
GHSA-j5ph-5jrp-hf3x
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
PR:H reflects mandatory BIOS admin credential or physical access; S:C and full C/I/A:H capture the OS trust-boundary collapse from Secure Boot defeat.
Primary rating from Vendor (Insyde).
CVSS VectorVendor: Insyde
Lifecycle Timeline
2DescriptionCVE.org
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
AnalysisAI
Secure Boot bypass in InsydeH2O UEFI firmware allows a locally-privileged attacker to leverage the embedded UEFI Shell to execute shell commands or startup scripts that circumvent Secure Boot integrity enforcement, enabling pre-OS code execution outside the chain of trust. The vulnerability affects InsydeH2O across all tracked versions per the CPE wildcard, with remediation details deferred to OEM-specific advisories referenced in Insyde SA-2026004. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires one of two access paths: (1) knowledge of the BIOS administrator password combined with the ability to reach the BIOS setup menu (local physical or KVM access), or (2) direct physical access to the machine where the BIOS is either unprotected or has been unlocked. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H scores 8.2 (High), which reflects the high-privilege prerequisite but acknowledges the complete impact once that threshold is crossed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to obtain and apply BIOS/UEFI firmware updates issued by the relevant OEM, as InsydeH2O patches flow from Insyde to OEM partners before reaching end users as device-specific BIOS updates. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all systems using InsydeH2O firmware (check BIOS/UEFI version via system queries or manual BIOS inspection); contact device OEMs for patch availability and advisory references (Insyde SA-2026004); restrict local and physical access to affected systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.8)
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.2), this vulnerabil
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.2), this vulnerabil
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.2), this vulnerabil
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.2), this vulnerabil
An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. Rated high severity (CVSS 7.8), this vulnerabil
Arbitrary code execution at the firmware level is possible in Insyde Software's InsydeH2O UEFI implementation due to the
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated medium severity (CVSS 6.0), this vulnerab
An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5
A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 all
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.4
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. Rated high severity (CVSS 8.8), thi
Same weakness CWE-489 – Active Debug Code
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today