CVE-2026-8810CWE-522
CVE-2026-8810
Medium · published August 19, 2026
What it is
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.
The record
Technical detail
- CVSS v3.1
- 6.9 · MEDIUM
- Vector
- CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00140 · 3.0th percentile
- Weakness
- CWE-522 · Insufficiently Protected Credentials
- Published
- 2026-08-19T10:17Z
References (1)
EPSS history
Timeline