CVE-2026-8863CVE-2026-8863
- 7.8HighCVSS base score
- 0.11%Exploitation in 30 daysEPSS · top 99% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Timeline
ID reserved
By certcc
- 22 days later
· 22 days later
Published
- 1 day later
· 1 day later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.11% · top 99% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
Oracle Corporation · OracleLinux(7.2) shim
- affected 0.9
PC-Doctor · Service Center Enterprise
- affected 14 – ≤ 17.0.7536.900
PC-Doctor · Service Center Drive Erase
- affected 15 – ≤ 17.0.7538.592
PC-Doctor · Service Center Japan
- affected 15 – ≤ 17.0.7539.904
- affected 14 – ≤ 17.0.7535.900
PC-Doctor · Network Factory for Linux (Bootable Diagnostics)
- affected 6.9 – ≤ 6.20.7711.267
PC-Doctor · Factory for Linux (Bootable Diagnostics)
- affected 6.9 – ≤ 6.20.7710.267
- affected 4.2
Blancco UK · WhiteCanyon WipeDrive
- affected 8.0.0 – ≤ 8.1.3
baramundi software · baramundi Management Suite
- affected ≤ 2024R1
- affected 0.9
Finland Matriculation Board · Abitti 1
- affected 1.0.0
- affected R9
- affected R10
References
References3
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-35791 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-8863)Record last updated .