{"id":"CVE-2026-6485","aliases":["AZL-100017","AZL-99990","EUVD-2026-74613","GHSA-j5ph-5jrp-hf3x"],"status":"published","title":"UEFI BIOS embedded Shell can be used to bypass Secure Boot","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00179,"percentile":0.07509,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-489"],"published":"2026-09-09T03:54:01Z","modified":"2026-09-14T05:26:59Z","affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"10.1.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"20240524git3e722403cd16-20"}]}]}],"products":[{"vendor":"insyde software","product":"insydeh2o"}],"references":[{"url":"https://www.insyde.com/security-pledge/sa-2026004/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6485","tags":["web"]},{"url":"https://www.insyde.com/security-pledge/sa-2026004"},{"url":"https://github.com/advisories/GHSA-j5ph-5jrp-hf3x"}],"sources":{"cve":[{"id":"CVE-2026-6485","title":"UEFI BIOS embedded Shell can be used to bypass Secure Boot","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T03:54:01.46Z","modified":"2026-09-10T14:30:20.224Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-489"],"updated_at":"2026-11-02T13:50:04.986624Z"}],"euvd":[{"id":"EUVD-2026-74613","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T03:54:01Z","modified":"2026-09-10T14:30:20Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:24.835649Z"}],"ghsa":[{"id":"GHSA-j5ph-5jrp-hf3x","title":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T06:31:37Z","modified":"2026-09-09T06:31:41Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-489"],"updated_at":"2026-11-02T15:11:37.523128Z"}],"nvd":[{"id":"CVE-2026-6485","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T04:19:36.437Z","modified":"2026-09-10T15:17:39.427Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-489"],"updated_at":"2026-11-02T14:12:45.612639Z"}],"osv":[{"id":"AZL-100017","title":"CVE-2026-6485 affecting package qemu 10.1.0-1","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T04:19:36Z","modified":"2026-09-14T05:26:59Z","updated_at":"2026-11-02T15:27:59.742917Z"},{"id":"AZL-99990","title":"CVE-2026-6485 affecting package edk2 20240524git3e722403cd16-20","description":"UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.","status":"published","published":"2026-09-09T04:19:36Z","modified":"2026-09-14T05:26:59Z","updated_at":"2026-11-02T15:28:12.886815Z"}]}}