High 7.8Published Jun 9, 2026

CVE-2026-8863CVE-2026-8863

Updated under an hour ago (Oct 26, 2026, 6:10 PM ET)

Does this affect you?

It affects Oracle Corporation OracleLinux(7.2) shim and 12 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Oracle Corporation OracleLinux(7.2) shim

Exploited in the last 30 days

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

CVSS: 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-347, CWE-354
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: certcc
NVD analysis: Deferred
Record last updated: Jun 10, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Oracle Corporation OracleLinux(7.2) shim oracle:oraclelinux_7.2_shim (from the name)	0.9	CNA record
PC-Doctor Service Center Enterprise pc_doctor:service_center_enterprise (from the name)	from 14 through 17.0.7536.900	CNA record
PC-Doctor Service Center Drive Erase pc_doctor:service_center_drive_erase (from the name)	from 15 through 17.0.7538.592	CNA record
PC-Doctor Service Center Japan pc_doctor:service_center_japan (from the name)	from 15 through 17.0.7539.904	CNA record
PC-Doctor Service Center pc_doctor:service_center (from the name)	from 14 through 17.0.7535.900	CNA record
PC-Doctor Network Factory for Linux (Bootable Diagnostics) pc_doctor:network_factory_for_linux_bootable_diagnostics (from the name)	from 6.9 through 6.20.7711.267	CNA record
PC-Doctor Factory for Linux (Bootable Diagnostics) pc_doctor:factory_for_linux_bootable_diagnostics (from the name)	from 6.9 through 6.20.7710.267	CNA record
Spyrus WTGCreator spyrus:wtgcreator (from the name)	4.2	CNA record
Blancco UK WhiteCanyon WipeDrive blancco_uk:whitecanyon_wipedrive (from the name)	from 8.0.0 through 8.1.3	CNA record
baramundi software baramundi Management Suite baramundi_software:baramundi_management_suite (from the name)	through 2024R1	CNA record
1–10 of 13

References

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8863	vendor-advisory
https://kb.cert.org/vuls/id/616257	third-party-advisory
https://www.kb.cert.org/vuls/id/616257

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.