{"id":"CVE-2026-116638","published":"2026-10-26T19:16:31.117","lastModified":"2026-10-27T06:17:24.370","description":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://beafn28.es/articulos/winre-uefi-bypass","tags":[]},{"url":"https://kb.cert.org/vuls/id/226679","tags":[]},{"url":"https://www.kb.cert.org/vuls/id/226679","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}