CVE-2026-0893
5.8MediumPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-213
Impact
A local attacker with low-privilege access can expose sensitive BIOS information, potentially escalating privileges and altering system integrity. They must already have local execution on the host to exploit this.
Root cause
Improper access control in the AMI Aptio V BIOS firmware exposes sensitive data to unauthorized local actors.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v4.0 · CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Flash the motherboard BIOS with the patched firmware update from your hardware vendor referencing advisory AMI-SA-2026002. As an interim mitigation, restrict local shell and physical access to sensitive host systems.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.