CVE-2026-6484: Insyde Software INSYDEH2O

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

Affected products

• Insyde Software INSYDEH2O

Published 2026-08-12. Last modified 2026-08-31.