High severity · published Sep 8, 2026
CVE-2026-33197
BDS Module Bypass Secure Boot Advisory
8.7
CVSS
0.2%
EPSS
No
On KEV
Description
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
AptioV · AMI
AptioV_5.0 before AptioV_5.044 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-33197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-33197
go.ami.com
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026001.pdf
More from AptioV
8.3
CVE-2025-58774
UEFI OOB Write and Buffer Overflow Vulnerabilities
8.2
CVE-2025-58772
UEFI OOB Write and Buffer Overflow Vulnerabilities
7.1
CVE-2025-58773
UEFI OOB Write and Buffer Overflow Vulnerabilities
7.1
CVE-2025-58771
UEFI OOB Write and Buffer Overflow Vulnerabilities
5.8
CVE-2026-0893
Uncleared Password Keystrokes Vulnerability