Live › vulnerability › CVE-2026-116638
Go to dashboardThe Windows Recovery Environment in Windows 10 and 11 can be abused to get around firmware protections, including administrator-set UEFI/BIOS passwords. An attacker with physical or administrative access to a device may use WinRE boot mechanisms to reach system resources they should not.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 19:32 UTC. All times on this page are UTC.
Devices running Windows 10 or Windows 11 where an administrator has set a UEFI/BIOS password to protect firmware settings. The sources do not say which builds are affected or whether a default configuration is exposed. Teams without managed Windows endpoints with firmware passwords can likely skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.
This page as .md · .json · in your agent: get_signal("CVE-2026-116638")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.