UNKNOWN NVD

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEF

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.

References

https://beafn28.es/articulos/winre-uefi-bypass
https://kb.cert.org/vuls/id/226679

Published: 2026-10-26 · Source: NVD · Feed updated: 2026-10-26

This unknown severity vulnerability was published on 2026-10-26 via NVD.

vulnfeed aggregates 18455 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.