{"schema":"threatline.record/2","record":{"id":"CVE-2026-116638","aliases":[],"summary":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physi","details":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to circumvent firmware protections and gain unauthorized access to system resources.","categories":["Unclassified"],"product":"n/a","vendor":"n/a","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116638","source_modified_at":"2026-10-26T18:16:32.332Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"n/a","vendor":"n/a","versions":[{"version":"n/a","status":"affected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T00:00:00.000Z","modified_at":"2026-10-26T18:16:32.332Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116638","fetched_at":"2026-10-26T19:10:57.178988Z","source_modified_at":"2026-10-26T18:16:32.332Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://kb.cert.org/vuls/id/226679"},{"source":"CVE List","url":"https://beafn28.es/articulos/winre-uefi-bypass"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T18:16:32.332Z","content_hash":"683dc5ce23450e04ca1877f9ad400eb5436db064f57cee35bf8d7fad56fd7692"}}