High severity · published Jun 9, 2026
CVE-2026-8863
No description published yet
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A1
Abitti 1 · Finland Matriculation Board
1.0.0 · source: vendor
FF
Factory for Linux (Bootable Diagnostics) · PC-Doctor
6.9 through 6.20.7710.267 · source: vendor
NF
Network Factory for Linux (Bootable Diagnostics) · PC-Doctor
6.9 through 6.20.7711.267 · source: vendor
OS
OpenSUSE shim · SUSE Linux
0.9 · source: vendor
OS
OracleLinux(7.2) shim · Oracle Corporation
0.9 · source: vendor
RO
RosaLinux · NTC IT ROSA LLC
R9; R10 · source: vendor
SC
Service Center · PC-Doctor
14 through 17.0.7535.900 · source: vendor
SC
Service Center Drive Erase · PC-Doctor
15 through 17.0.7538.592 · source: vendor
SC
Service Center Enterprise · PC-Doctor
14 through 17.0.7536.900 · source: vendor
SC
Service Center Japan · PC-Doctor
15 through 17.0.7539.904 · source: vendor
WT
WTGCreator · Spyrus
4.2 · source: vendor
WW
WhiteCanyon WipeDrive · Blancco UK
8.0.0 through 8.1.3 · source: vendor
