[UPDATE] [mittel] Insyde UEFI Firmware und Cisco UCS (UEFI Shell Secure Boot): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

medium

Published

2026-09-10

Exploitation

Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3240

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• highCVE-2026-6485: UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scri…nvd
• unknownVulnérabilité dans les produits Cisco (09 septembre 2026)cert-fr-avis
• highCVE-2026-20293: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Ci…nvd
• highCisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerabilitycisco-psirt

Recent advisories for Insyde UEFI Firmware

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• medium[UPDATE] [medium] Insyde UEFI Firmware: Multiple vulnerabilitiescert-bund · 2026-08-28
• low[NEW] [low] Insyde UEFI Firmware: Vulnerability allows unspecified attackcert-bund · 2026-08-26
• medium[NEW] [medium] Insyde UEFI Firmware: Vulnerability Enables Information Disclosurecert-bund · 2026-08-19
• high[NEW] [high] Insyde UEFI Firmware (InsydeH2O): Vulnerability enables Code Executioncert-bund · 2026-08-12

More from CERT-Bund (BSI) Security Advisories

• medium[UPDATE] [mittel] OpenSSH: Mehrere Schwachstellen2026-09-10
• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10
• high[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen2026-09-10
• medium[UPDATE] [mittel] gzip: Mehrere Schwachstellen2026-09-10
• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10