CVE-2026-20293

Name of the Vulnerable Software and Affected Versions Cisco UCS Servers and UCS-based appliances (affected versions not specified)

Description A flaw in the Unified Extensible Firmware Interface (UEFI) Shell implementation allows an authenticated attacker with user or admin credentials, or an unauthenticated attacker with physical access, to bypass UEFI Secure Boot validation checks. This occurs because memory write commands remain available in the UEFI Shell even when UEFI Secure Boot is enabled. An attacker can select the UEFI Shell boot option during startup and use shell commands to modify UEFI memory variables, enabling them to manipulate the preboot environment, overwrite Secure Boot-related memory values, and execute unauthorized software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.