CVE-2021-38489: Insyde Software INSYDEH2O

High severity, CVSS 8.2. EPSS: 0.1% chance of exploitation in the next 30 days.

HDD password plaintext is stored in a UEFI variable.

Affected products

• Insyde Software INSYDEH2O

Published 2026-09-03. Last modified 2026-09-03.