CVE-2025-2486

edk2: edk2: UEFI Shell access in Secure Boot environments allows bypass of Secure Boot constraints

Loading…

Severity

Low

Red Hat Product Security

3.6

CVSS 3.1

Review impact separately from score.

Published · November 27, 2025

Updated · August 31, 2026

Description

A flaw was found in edk2. This vulnerability allows bypass of Secure Boot (Unified Extensible Firmware Interface) constraints via accidentally allowing the UEFI Shell to be accessed in Secure Boot environments.

Statement

This vulnerability doesn't affect any supported Red Hat products.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-489 · Active Debug Code