7.8
High
CVE-2026-8863 Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass
Description
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Center Enterprise 14 | 14 → 17.0.7536.900 | No fix stated |
| Service Center Drive Erase 15 | 15 → 17.0.7538.592 | No fix stated |
| Service Center Japan 15 | 15 → 17.0.7539.904 | No fix stated |
| Service Center 14 | 14 → 17.0.7535.900 | No fix stated |
| Network Factory for Linux (Bootable Diagnostics) 6.9 | 6.9 → 6.20.7711.267 | No fix stated |
| Factory for Linux (Bootable Diagnostics) 6.9 | 6.9 → 6.20.7710.267 | No fix stated |
| WTGCreator | 4.2 | No fix stated |
| WhiteCanyon WipeDrive 8.0 | 8.0.0 → 8.1.3 | No fix stated |
| Baramundi Management Suite 2024 | earliest → 2024R1 | No fix stated |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Abitti 1 | 1.0.0 | No fix stated |
| RosaLinux | Versions not published | |
| OracleLinux(7.2) shim | 0.9 | No fix stated |
| OpenSUSE shim | 0.9 | No fix stated |