Insyde's Security Pledge

Recent Security Advisories

INSYDE-SA-2026005

Product

CVSS Score

Original Date

Last Revised

InsydeH2O

6.9

2026-08-18

Summary

HDD Password leakage vulnerability.

Vulnerability Details

CVSS Vector: cvss:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CVE-2026-8810 Description: On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. CWE-522: Insufficiently Protected Credentials

Solution Information

Kernel 5.6: Version 05.63.21

Kernel 5.7: Version 05.72.21

Acknowledgements

Revision History

Revision #

Date

Description

1

2026-08-18

Initial Release