https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:03:06.860285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-249772 EUVD-2026-249772 2026-10-02T11:03:06.892835+00:00 EUVD-2026-249772 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4275 fkie_cve-2025-4275 2026-10-02T11:03:06.892868+00:00

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.

 https://cve.radiocsirt.org/vuln/ghsa-v9r5-7mg9-fwrr GHSA-v9r5-7mg9-fwrr 2026-10-02T11:03:06.892899+00:00

Running the provided utility changes the certificate on any Insyde BIOS and then the attached .efi file can be launched.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1300 WID-SEC-W-2025-1300 — Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-02T11:03:06.892916+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um beliebigen Programmcode auszuführen.