UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-116638
The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-26T23:20:21.485325+00:00
- Cve id
- CVE-2026-116638
- First seen by Signal
- 2026-10-26T23:13:25+00:00
- Retrieved at
- 2026-10-26T23:21:23+00:00
- Published at
- 2026-10-26T19:16:31.117
- Last modified
- 2026-10-26T19:16:31.117
Explore deeper with Ninja Signal's threat intelligence graph