What’s Vulnerable › Vulnerabilities

CVE-2026-8863: CVE-2026-8863

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-09 · updated 2026-07-23

Description

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

Affected products

• baramundi software baramundi Management Suite: through 2024R1
• Blancco UK WhiteCanyon WipeDrive: from 8.0.0 through 8.1.3
• Finland Matriculation Board Abitti 1: 1.0.0
• NTC IT ROSA LLC RosaLinux: R9, R10
• Oracle Corporation OracleLinux(7.2) shim: 0.9
• PC-Doctor Factory for Linux (Bootable Diagnostics): from 6.9 through 6.20.7710.267
• PC-Doctor Network Factory for Linux (Bootable Diagnostics): from 6.9 through 6.20.7711.267
• PC-Doctor Service Center: from 14 through 17.0.7535.900
• PC-Doctor Service Center Drive Erase: from 15 through 17.0.7538.592
• PC-Doctor Service Center Enterprise: from 14 through 17.0.7536.900
• PC-Doctor Service Center Japan: from 15 through 17.0.7539.904
• Spyrus WTGCreator: 4.2
• SUSE Linux OpenSUSE shim: 0.9

References

• https://kb.cert.org/vuls/id/616257
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8863
• https://www.kb.cert.org/vuls/id/616257

Get alerted when CVE-2026-8863 or the next vulnerability affects your stack