{"id":"CVE-2026-116638","aliases":[],"title":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured…","titleSource":"mitre","descriptionSource":"mitre","products":[{"vendor":"n/a","name":"n/a","platforms":[],"versions":[{"version":"n/a","status":"affected"}],"source":"mitre","url":"https://www.cve.org/CVERecord?id=CVE-2026-116638"}],"remediation":[],"description":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.","severity":"unknown","score":null,"published":"2026-10-26T00:00:00.000Z","modified":"2026-10-27T05:07:45.838Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://kb.cert.org/vuls/id/226679","https://beafn28.es/articulos/winre-uefi-bypass"],"sources":[{"name":"CVE","id":"CVE-2026-116638","modified":"2026-10-27T05:07:45.838Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116638"}],"assessments":[],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T02:25:31.980Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}