← All credits

Thanks to Nikolaj Schlej, independent firmware security researcher, for reporting the vulnerability and engaging in this coordinated disclosure.

2 vulnerability records and advisories credit this contributor.

CVE-2026-6484
Lack of verified boot to certain FV may cause arbitrary code execution
CVE-2025-4275
SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate