CVE Watch26 oct 2026

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administ

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 26 oct 2026 · Última mod.: 26 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.

Referencias oficiales

beafn28.eshttps://beafn28.es/articulos/winre-uefi-bypass
kb.cert.orghttps://kb.cert.org/vuls/id/226679

CVEs relacionados

Sin CVEs relacionados por CWE o producto.