Vendors and CVEs › CVEs › CVE-2026-72895
CVE-2026-72895: what it is, who is affected and what to do
A BIOS vendor test key sits in the UEFI Secure Boot key database. A local attacker with physical or administrative access could boot an operating system signed with it, bypassing Secure Boot. Siemens has released new versions.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 7.7, as the source states.
- Records. CVE-2026-72895 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Siemens SIMATIC industrial PCs have a Secure Boot test-key flaw
A BIOS vendor test key sits in the UEFI Secure Boot key database. A local attacker with physical or administrative access could boot an operating system signed with it, bypassing Secure Boot.