📋 ADVISORIES
CERT warns HP PC BIOS InsydeH2O SMM flaw (CVE-2026-12855) enables arbitrary SMRAM writes
CERT/CC disclosed an out-of-bounds write in HP-custom InsydeH2O SMM handlers that lets kernel-level attackers write to SMRAM and potentially execute code in SMM.- Affects HP PCs with InsydeH2O Kernel 5.5 or earlier; scope limited to HP system board ID 8D41/08D42, BIOS family F.22, Intel Meteor Lake SoC
- CVE-2026-12855: out-of-bounds write in the HP-custom H19WMIHandlerSmm module (GUID f1946499-571b-44c3-9b9c-cc55210b0c02) allows arbitrary physical memory reads/writes, including SMRAM
- Attacker with ring-0 kernel privileges triggers the handler via Software SMI on I/O port 0xB2 with crafted CPU register values; the handler fails to validate memory ranges (no SmmIsBufferOutsideSmmValid/TSEG checks)
- Code executing in SMM can modify SMM-protected memory, potentially achieving arbitrary code execution and persistence in SMM; firmware/flash impact is platform-dependent
- Insyde says the vulnerable modules are HP-specific and not in standard Insyde code; ASUS, GIGABYTE, AMI, Intel, and Phoenix report not affected; fixed in HP feature versions 05.47.2701.2631 through 06.01.23.2630
📄 Source for China-nexus UAT-11587 uses Antino backdoor with Microsoft 365 Outlook/OneDrive C2 against Asian governments — blog.talosintelligence.com
📄 Source for HCL BigFix Service Management v27 hit by five vulnerabilities including stored XSS and info disclosure — support.hcl-software.com
🔓 CVEs & KEV
CVE-2026-79898 — Fortra BoKS Manager — CVSS 9.1 — Fortra BoKS Manager crlserver command injection vulnerabilityFortra BoKS Mana...
CVE-2026-79899 — Fortra BoKS Manager — CVSS 7.9 — Fortra BoKS Manager bccgethostcert insecure temporary file vulnerabilityFortr...